Boards SSL configuration insecure, "F" rating from SSL Labs

CreepingDeath

I listen to the "Security Now" podcast every week, and they highlighted a tool from SSL Labs which analyses websites for insecure use of SSL.

Boards.ie got an "F" rating.

Boards Results Link

SSL Labs Test Page to test other sites

In general it's a question of poor web server configuration, allowing too many ciphers including old and vulnerable ones, instead of only supporting the stronger ones.

regards,
CD

Boards.ie: Danny

Thanks for this.

I feel it pertinent to point out that the only thing we support over SSL is our auth system which used to be done over plain HTTP so even with SSLv2 and some weaker ciphers it's still an improvement over what was before. Even so, our system admins will investigate tightening up our SSL configuration where appropriate which should produce a better rating.

Danny

Boards.ie: Danny

Howdy, our sysadmins have deployed some configuration changes eliminating older ciphers and bringing us up to a C. Other issues will be addressed on a rolling maintenance schedule so hopefully we can get a B or A.

Thanks again for alerting us to this

Danny