rbsec

Results 86 comments of rbsec

@honze-net I'm not sure you've uploaded the right XSL in that Gist - it looks like it's the Nmap one?

@honze-net - looks great. Sorry for the delay in getting back to you - been a busy couple of weeks. I can see there are some area where the XML...

@honze-net apologies, this keep slipping down my todo list. The current output looks really good - are there any changes you need to the XML for the final attributes?

@honze-net I've added good/acceptable/weak attributes to `` and `

I can't see any reason that you wouldn't be able to to statically link against a pre-compiled version, but it's not something that's in the Makefile as an option, so...

@jtesta TLS 1.1 often seems like a pointless protocol to support, because it's very rare to find anything that supports it and doesn't also support 1.2. However, with the lack...

> Non-DH/ECDH cipher suites should be marked as warnings (i.e.: colorized yellow). These do not afford the property of Forward Secrecy, so a server compromise can divulge past communications. This...

> One thing I felt we might have missed on, MFA user confusion. Maybe the platform uses/sends specific variables and the app doesn't hard-link them to a specific user, allowing...

@ThunderSon I've addressed all your suggestions in the most recent commit(s).

If the content is clear and accurate then I think it's fine to merge it. If we'd prefer a different writing style, that can be a future issue/PR to change...