• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

90% of SSL Secure sites aren't really secure! Scary...

newtekie1

Semi-Retired Folder
Joined
Nov 22, 2005
Messages
24,413 (5.50/day)
Likes
10,549
Location
Indiana, USA
Processor Intel Core i7 8700K@4.8GHz(Quick and dirty)
Motherboard AsRock Z370 Taichi
Cooling Corsair H110i GTX
Memory 32GB Corsair DDR4-3000
Video Card(s) PNY XLR8 GTX1060 6GB
Storage 480GB Crucial MX200 + 2TB Seagate Solid State Hybrid Drive with 128GB OCZ Synapse SSD Cache
Display(s) QNIX QX2710 1440p@120Hz
Case Fractal Design Define S
Audio Device(s) Onboard is good enough for me
Power Supply Corsair HX850
Software Windows 10 Pro x64
#1
https://www.trustworthyinternet.org...se-to-make-ssl-more-secure-and-pervasive.html

[sigquote]Looking at the SSL Labs grades, which are designed to sum up the quality of SSL configuration, we can see that about 50% (99,903 sites) got an A, which is a good result. Previous global SSL Labs surveys reported about 33% well-configured sites, which means that more popular sites are better configured. Unfortunately, many of these A-grade sites (still) support insecure renegotiation (8,522 sites, or 8.5% of the well-configured ones) or are vulnerable to the BEAST attack (72,357 sites, or 72.4% of the well-configured ones). This leaves us with only 19,024 sites (or 9.59% of all sites) that are genuinely secure at this level of analysis.[/sigquote]

This is scary. That is really all I can say about it.
 

AsRock

TPU addict
Joined
Jun 23, 2007
Messages
15,369 (3.98/day)
Likes
4,780
Location
US
Processor 2500k \ 3770k
Motherboard ASRock Z68 \ Z77
Memory Samsung low profile 1600
Video Card(s) XFX 6770 \ XFX R9 390X
Storage Intel 80Gb (SATA2) WD 250Gb \ Team SSD+Samsung Evo 250Gb+500Gb+ 2xCorsair Force+WD250GbHDD
Display(s) Samsung 1080P \ Toshiba HDTV 1080P
Case HTPC400 \ Thermaltake Armor case ( original ), With Zalman fan controller ( wattage usage ).
Audio Device(s) Yamaha RX-V475 \ Marantz SR5008 Tannoy Mercury MKII Paradigm 5SE + Tannoy Mercury F4
Power Supply PC&Power 750w \ Seasonic 750w MKII
Mouse MS intelimouse \ Logitech G700s + Steelseries Sensei wireless
Keyboard Logitech K120 \ ROCCAT MK Pro ( modded amber leds )
Benchmark Scores Meh benchmarks.
#2
I am surprised that your surprised. Although i am surprised it's as high as 90%.
 

newtekie1

Semi-Retired Folder
Joined
Nov 22, 2005
Messages
24,413 (5.50/day)
Likes
10,549
Location
Indiana, USA
Processor Intel Core i7 8700K@4.8GHz(Quick and dirty)
Motherboard AsRock Z370 Taichi
Cooling Corsair H110i GTX
Memory 32GB Corsair DDR4-3000
Video Card(s) PNY XLR8 GTX1060 6GB
Storage 480GB Crucial MX200 + 2TB Seagate Solid State Hybrid Drive with 128GB OCZ Synapse SSD Cache
Display(s) QNIX QX2710 1440p@120Hz
Case Fractal Design Define S
Audio Device(s) Onboard is good enough for me
Power Supply Corsair HX850
Software Windows 10 Pro x64
#3
Yeah, the 90% thing is what I'm surprised about, I knew SSL wasn't perfect.
 
Joined
May 13, 2010
Messages
4,437 (1.58/day)
Likes
1,621
System Name RemixedBeast
Processor Intel i5 3570K @ 3.4Ghz
Motherboard ASRock Z77 Pro3
Cooling Coolermaster Hyper 212 Evo
Memory 16GB Corsair XMS3
Video Card(s) EVGA Nvidia GTX 650 Ti SSC 1GB
Storage 1.5TB Seagate/128GB Samsung 840
Display(s) Samsung SyncMaster P2350 23in @ 1920x1080 + LG Flatron 19in Widescreen 1440x900
Case Antec Three Hundred Two
Audio Device(s) Beyerdynamic DT770 Pro 80 // Fiio E7 Amp/DAC
Power Supply 620w Antec High Current Gamer HCG-620M
Mouse Logitech G700s/G502
Keyboard Logitech K740
Software Windows Server 2012 x64 Standard
Benchmark Scores Network: APs: Cisco Meraki MR32, Ubiquiti Unifi AP-AC-LR and Lite, Ligowave NFT-3AC
#4
Ouch!
 
Joined
Aug 17, 2009
Messages
2,553 (0.83/day)
Likes
1,013
Location
United States
System Name Aluminum Mallard
Processor Intel i7 940
Motherboard ASUS Rampage III: Gene
Cooling Noctua C-12P
Memory 6GB Corsair Dominator DDR3
Video Card(s) ASUS HD5870
Storage OCZ Vertex 2 60GB SSD, 2 x Seagate Barracuda 7200.12 in RAID0
Display(s) HP w2338h
Case Corsair 700D
Audio Device(s) On Board
Power Supply Corsair TX850
Software Win7 Ult 64 bit
Benchmark Scores 31 FPS in Dalaran.
#5
Good lord!
 
Joined
Nov 13, 2009
Messages
24 (0.01/day)
Likes
2
Location
Copenhagen, Denmark
System Name Silent-Storm
Processor i7-3770K
Motherboard ASRock Z77 Extreme6
Cooling 9x 120mm for GPU+CPU
Memory Micron D9... Crucial Ballistix 8GB @ 1866 8-8-8-27
Video Card(s) Gigabyte GTX580 SOC
Storage Force 3 120GB, WD AV25, 500GB 2.5"
Display(s) 24" BenQ
Case Corsair Graphite 600T
Audio Device(s) ASUS Xonar Essence STX (ordered, not arrived)
Power Supply Corsair AX1200
Software Lots
Benchmark Scores Does not matter.
#6
Oh I thought of different kind of 'sites', when it was related to security...
Using TLS myself :)