How's My SSL?

The official account of

[How's My SSL? @howsmyssl]

@theeMethod Corrected. Thank you

[How's My SSL? @howsmyssl]

Want to use How’s My SSL’s API on your site? Grab a subscription at https://t.co/9wLjzI5xs4

[How's My SSL? @howsmyssl]

And How’s My SSL now has a plan that supports as many subdomains as you want for one subscription price https://t.co/jP711mWG3K

[How's My SSL? @howsmyssl]

Two things happened recently. first, lack of session ticket support no longer marks the client as Improvable

[How's My SSL? @howsmyssl]

Want to use How's My SSL's API on your commercial website? Sign up and subscribe at https://t.co/9wLjzI5xs4

[Jeff Hodges @jmhodges]

(If you've recently integrated or changed how you use howsmyssl, feel free to DM or email me! That traffic spike is big) https://t.co/rI22UHpOUv

[How's My SSL? @howsmyssl]

We're now blocking API requests with empty User-Agents. If you think that might be your code, please check in with us.

[How's My SSL? @howsmyssl]

On Oct 7th, a new client added ~10x the usual traffic to the howsmyssl API but doesn't include a Referrer or User-Agent

[How's My SSL? @howsmyssl]

Sorry about that! Fixed up and ensuring it never happens again. @marianoju

[How's My SSL? @howsmyssl]

As a free API without financial backing, it's not able to guarantee latency or uptime.

[How's My SSL? @howsmyssl]

How's My SSL's API is for testing clients under your control, not for testing clients of your website.

[How's My SSL? @howsmyssl]

@akwala That's because we have to drop to lower security TLS options in order to test bad clients that support them.

[How's My SSL? @howsmyssl]

Use of the RC4 cipher suite will now get a client marked as Bad. https://t.co/38U76d3mVU

[Jeff Hodges @jmhodges]

This is all in response to my ticket created after http://t.co/XPqzpqbAAD's release. https://t.co/YCkdbeMpCN

[Jeff Hodges @jmhodges]

Took a year but OpenSSL removed the export cipher suites from their default list. https://t.co/BFlTAb1oYt
They have not removed the LOW ones

[How's My SSL? @howsmyssl]

We're discussing marking clients using RC4 cipher suites as Bad and need some data: https://t.co/MmLXgye45n

[How's My SSL? @howsmyssl]

Thinking about a name change, y'all.

[How's My SSL? @howsmyssl]

Please be aware that SSLv3 is now, officially, super busted. http://t.co/CQKqO6e7Wn

More: https://t.co/7cZFgB4Nmy

[How's My SSL? @howsmyssl]

Had a little bit of AWS Xen-bug-restart downtime. But we're back!

[How's My SSL? @howsmyssl]

Ruby's OpenSSL bindings have been fixed. https://t.co/RVB7C1gEA9

No data yet on what versions will get the patch.