Scribd
Upload
9 views19 pages

TLS Support and Vulnerabilities Analysis

Uploaded by

kolesnik1381
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
9 views19 pages

TLS Support and Vulnerabilities Analysis

Uploaded by

kolesnik1381
Copyright
© All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd

Домен Поддержка TLS 1.0 Поддержка TLS 1.1 Поддержка TLS 1.

3
[Link] Да Да Да

[Link]
[Link]
Рейтинг [Link]Предотвраще
Secure Renegotiation
B Да

Secure Renegotiation
Secure Client-Initiated Renegotiation
Insecure Client-Initiated Renegotiation
BEAST attack
POODLE (SSLv3)
POODLE (TLS)
Zombie POODLE
GOLDENDOODLE
OpenSSL 0-Length
Sleeping POODLE
Downgrade attack prevention
SSL/TLS compression
RC4
Heartbeat (extension)
Heartbleed (vulnerability)
Ticketbleed (vulnerability)
OpenSSL CCS vuln. (CVE-2014-0224)
OpenSSL Padding Oracle vuln.
(CVE-2016-2107)
ROBOT (vulnerability)
Forward Secrecy
ALPN
NPN
Session resumption (caching)
Session resumption (tickets)
OCSP stapling
Strict Transport Security (HSTS)
HSTS Preloading
Public Key Pinning (HPKP)
Public Key Pinning Report-Only
Public Key Pinning (Static)
Long handshake intolerance
TLS extension intolerance
TLS version intolerance
Incorrect SNI alerts
Uses common DH primes
DH public server param (Ys) reuse
ECDH public server param reuse
Supported Named Groups
SSL 2 handshake compatibility
0-RTT enabled
Рейтинг
Дата
LOGJAM

[Link]
[Link]
Supported
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
No
No (more info)
No (more info)
No (more info)

No (more info)
No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
No
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
x25519, secp256r1, x448, secp521r1, secp384r1 (server preferred order)
Yes
No
B
Tue, 11 Jun 2024 09:24:16 UTC
SHA-1

[Link]
[Link]
Secure Renegotiation
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
No
No (more info)
No (more info)
No (more info)
No (more info)

No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
No
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
x25519, secp256r1, x448, secp521r1, secp384r1 (server preferred order)
Yes
No
B
Tue, 11 Jun 2024 09:24:16 UTC
POODLE

[Link]
[Link]
Supported
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
Yes
No (more info)
No (more info)
No (more info)

No (more info)
No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
Yes
max-age=15768000
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
secp256r1, secp521r1, secp384r1, secp256k1 (server preferred order)
Yes
B
Tue, 11 Jun 2024 09:24:16 UTC
BEAST

[Link]
[Link]
Supported
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
Yes
No (more info)
No (more info)
No (more info)

No (more info)
No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
Yes
max-age=15768000
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
secp256r1, secp521r1, secp384r1, secp256k1 (server preferred order)
Yes
B
Tue, 11 Jun 2024 09:24:16 UTC
Secure Renegotiation
Secure Client-Initiated Renegotiation
Insecure Client-Initiated Renegotiation
BEAST attack
POODLE (SSLv3)
POODLE (TLS)
Zombie POODLE
GOLDENDOODLE
OpenSSL 0-Length
Sleeping POODLE
Downgrade attack prevention
SSL/TLS compression
RC4
Heartbeat (extension)
Heartbleed (vulnerability)
Ticketbleed (vulnerability)
OpenSSL CCS vuln. (CVE-2014-0224)
OpenSSL Padding Oracle vuln.
(CVE-2016-2107)
ROBOT (vulnerability)
Forward Secrecy
ALPN
NPN
Session resumption (caching)
Session resumption (tickets)
OCSP stapling

Strict Transport Security (HSTS)


HSTS Preloading
Public Key Pinning (HPKP)
Public Key Pinning Report-Only
Public Key Pinning (Static)
Long handshake intolerance
TLS extension intolerance
TLS version intolerance
Incorrect SNI alerts
Uses common DH primes
DH public server param (Ys) reuse
ECDH public server param reuse
Supported Named Groups
SSL 2 handshake compatibility
CRIME TIME

[Link]
[Link]
Supported
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
Yes
No (more info)
No (more info)
No (more info)

No (more info)
No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
Yes
max-age=15768000
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
secp256r1, secp521r1, secp384r1, secp256k1 (server preferred order)
Yes
B
Tue, 11 Jun 2024 09:24:16 UTC
Supported
No
No
Not mitigated server-side (more info) TLS 1.0: 0xc013
No, SSL 3 not supported (more info)
No (more info)
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
No (more info) TLS 1.2 : 0xc027
Yes, TLS_FALLBACK_SCSV supported (more info)
No
No
Yes
No (more info)
No (more info)
No (more info)

No (more info)
No (more info)
With modern browsers (more info)
Yes h2 http/1.1
No
No (IDs assigned but not accepted)
Yes
No
Yes
max-age=15768000
Not in: Chrome Edge Firefox IE
No (more info)
No
No (more info)
No
No
No
No
No, DHE suites not supported
No, DHE suites not supported
No
secp256r1, secp521r1, secp384r1, secp256k1 (server preferred order)
Yes
BREACH Lucky 13 Logjam DROWN SLOTH Sweet32
Bleichenbache
HEIST HEARTBLEEDROBOT RC4

You might also like