Sibi Antony

Results 39 comments of Sibi Antony

Yes, I believe the patch being reviewed has a `certificateTransparencyStatus`. Will add.

It is already. AES GCM gets the highest (10/10) and AES CBC (8/10) comes next. Check [cipher-suites.js ](https://github.com/sibiantony/ssleuth/blob/master/modules/cipher-suites.js) These figures are approximate and not quantifiable by any means.

Well, I meant not-quantifiable for the figures defined in cipher-suites.js. Like you could ask why 10/10 for GCM and 8/10 for AES-CBC there's no 'measurable' method I can give. The...

Indeed, the UI doesn't display the individual scores computed for the parameters in cipher suite. Had thought about that many times, but was never a priority. That should qualify as...

@welwood08 is right. The scores are the overall ratings, and not just for the ciphersuite. The ratings also include EV-cert, Firefox connection status etc (which is inherited from the top...

Agree. Hope to add this in future, but not a priority right now.

@rugk It's easy to add another default list for DHE. The reason why I had made the whole thing customizable is that people can do it themselves. However, 1. Firefox...

1. There are plenty of banks that still support old and weak cipher suites (including RC4), possibly because they have old installations and is difficult to migrate. Just that some...

Thanks for reporting. Will apply the patch. However, I'm more curious about the SSL/TLS version in your screenshot. Is it always empty ? Do you see the TLS version after...

Had thought about this before. The reason I went for a separate button was that I wanted the rating to be displayed somewhere prominently, without having to go through mouse-clicks....