George

I think time elapsed is managed by Discord so there is no way to edit it in the code.

It seems like this is implemented for TLS 1.3 but not for TLS 1.2, maybe because all of the TLS 1.3 cipher suites are secure?

> > > This issue has already been raised in #1311, and it has also been discussed in [#1205 (comment)](https://github.com/drwetter/testssl.sh/pull/1205#issuecomment-547114597). That seems to be related to TLS 1.3 and has...

Again, I'm happy to mark this as a duplicate and discuss steps in the issue you mentioned, although it does seem a fix has just been implemented for that single...

Exactly what I’m proposing, have a list of secure ciphers that can be client preferred for TLS 1.2 and check if a server only has some or all of these...

What's the current behaviour for this? I notice there is already two entries for 10139 in the twitter.csv document, does it pick the first one or list both mentions in...

I think signing is definitely better than doing nothing but does it warrant partially safe? In the long term obviously the goal is for everyone to sign + filter but...

> > > It is preloaded actually: https://dev.ssllabs.com/ssltest/analyze.html?d=isbgpsafeyet.com&s=104.18.12.88&latest > It just displays that it's half a year (15552000) instead of a whole (31536000). But It's enough, i think. It's not...

It is true, I'm talking about **preloading** as explained in the title and the comment you quoted. Yes you can have HSTS without it being preloaded but to be preloaded...

> This is IMHO, very improbable. Anyway, next time when the site will be visited, it will be redirected to https and then HSTS'd foreVa! Not forever, it follows the...