SSL test & protection

CloneRanger · Jan 29, 2011

Here's some info & tools which might be of use !

Heise SSL Guardian for Windows

In May 2008, a security researcher discovered that the OpenSSL library used by several popular Linux distributions was generating weak cryptographic keys. While the two-year old flaw was soon fixed, SSL certicates created on computers running the flawed code were themselves open to attack [54, 55]. Responding to this flaw, German technology magazine Heise released the Heise SSL Guardian for the Windows operating system, which warns users of Internet Explorer and Chrome when they encounter a weak SSL certicate [56].

As network operators and security analysts, we would like to know when session hijacking occurs. In the following, I present the design and implementation of a sidejacking detector that I wrote for the Bro intrusion detection system.

http://matthias.vallentin.net
Click to expand...

heise SSL Guardian

Protection against unsafe SSL certificates

Https connections are often used to transfer important data, such as passwords, PINs, or credit card numbers. The browser ensures that the sender can be identified with a valid certificate and that the transferred data are encrypted. An error in the Debian Linux distribution has generated numerous certificates that are child's play to crack. Many servers still use these weak certificates, even though it is impossible to establish a secure connection using them. The heise SSL Guardian checks the SSL certificates and warns you when it detects a weak one.

http://www.h-online.com/security/features/Heise-SSL-Guardian-746213.html
Click to expand...

Test your https/ssl connection

https://bad.codefromthe70s.org

Firefox & other browsers already have various nice SSL tools, so feel free to add any you know of or use

Log in or Sign up

SSL test & protection

CloneRanger Registered Member

Log in or Sign up

SSL test & protection

CloneRanger Registered Member

Useful Searches