8000 Reliability of the cipher suites checking · Issue #139 · OWASP/O-Saft · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content
Reliability of the cipher suites checking #139
Open
@kylak

Description

@kylak

Hi.

There's another issue why I believe in general the result maybe not reliable: for some cipher suites you would need to provide TLS extensions or specific values in those extensions, otherwise the server won't possibly accept the ClientHello, see e.g. testssl/testssl.sh#1207 (comment)

source: testssl/testssl.sh#2526 (comment)

Did you know that ? Is it automatically managed by O-Saft when checking the full range of cipher suites ?

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      0