Cipher Suites and Anna.info website technical test: Difference between pages
Appearance
(Difference between pages)
Created page with "*https://hynek.me/articles/hardening-your-web-servers-ssl-ciphers/" |
|||
Line 1: | Line 1: | ||
*https:// | ==Links== | ||
*https://www.ssllabs.com/ssltest/analyze.html?d=anna.info | |||
** A+ (100,95,90,90); This site works only in browsers with SNI support. | |||
*https://tls.imirhil.fr/https/anna.info | |||
** B | |||
*https://hstspreload.appspot.com/?domain=anna.info | |||
** Status: anna.info is not preloaded. | |||
*https://observatory.mozilla.org/analyze.html?host=anna.info | |||
** A+; Score: 100/100, Tests Passed: 10/10 | |||
** Note: One can get a score higher than 100, e.g. | |||
*** +5 Content Security Policy - if no unsafe-inline is present, anna.info having "Content Security Policy (CSP) implemented with 'unsafe-inline' inside style-src" gets 0 for "Content Security Policy" | |||
*** +5 HTTP Strict Transport Security - if preload is present | |||
*https://www.google.com/webmasters/tools/mobile-friendly/?url=https%3A%2F%2Fanna.info%2F | |||
**Awesome! This page is mobile-friendly. | |||
*https://developers.google.com/speed/pagespeed/insights/?url=https%3A%2F%2Fanna.info%2F | |||
**mobile 100 / 100 Speed, 100 / 100 User Experience; desktop 100 / 100 Suggestions Summary | |||
==hstspreload.appspot.com== | |||
Error: No HSTS header | |||
Response error: No HSTS header is present on the response. | |||
Error: Too many redirects | |||
There are more than 3 redirects starting from `http://anna.info`. | |||
Error: Insecure redirect | |||
`http://anna.info` redirects to an insecure page on redirect #3: `http://anna.info/wiki/Main_Page` | |||
Error: Insecure redirect | |||
`https://anna.info` redirects to an insecure page on redirect #2: `http://anna.info/wiki/Main_Page` | |||
Error: www subdomain does not support HTTPS | |||
Domain error: The www subdomain exists, but we couldn't connect to it using HTTPS | |||
("x509: certificate is valid for tango.info, www.tango.info, not www.anna.info"). | |||
Since many people type this by habit, HSTS preloading would likely cause issues for your site. | |||
---- | |||
Error: www subdomain does not support HTTPS | |||
Domain error: The www subdomain exists, but we couldn't connect to it using HTTPS | |||
("x509: certificate is valid for anna.info, not www.anna.info"). | |||
Since many people type this by habit, HSTS preloading would likely cause issues for your site. |
Revision as of 2016-09-02T19:30:44
Links
- https://www.ssllabs.com/ssltest/analyze.html?d=anna.info
- A+ (100,95,90,90); This site works only in browsers with SNI support.
- https://tls.imirhil.fr/https/anna.info
- B
- https://hstspreload.appspot.com/?domain=anna.info
- Status: anna.info is not preloaded.
- https://observatory.mozilla.org/analyze.html?host=anna.info
- A+; Score: 100/100, Tests Passed: 10/10
- Note: One can get a score higher than 100, e.g.
- +5 Content Security Policy - if no unsafe-inline is present, anna.info having "Content Security Policy (CSP) implemented with 'unsafe-inline' inside style-src" gets 0 for "Content Security Policy"
- +5 HTTP Strict Transport Security - if preload is present
- https://www.google.com/webmasters/tools/mobile-friendly/?url=https%3A%2F%2Fanna.info%2F
- Awesome! This page is mobile-friendly.
- https://developers.google.com/speed/pagespeed/insights/?url=https%3A%2F%2Fanna.info%2F
- mobile 100 / 100 Speed, 100 / 100 User Experience; desktop 100 / 100 Suggestions Summary
hstspreload.appspot.com
Error: No HSTS header Response error: No HSTS header is present on the response.
Error: Too many redirects There are more than 3 redirects starting from `http://anna.info`.
Error: Insecure redirect `http://anna.info` redirects to an insecure page on redirect #3: `http://anna.info/wiki/Main_Page`
Error: Insecure redirect `https://anna.info` redirects to an insecure page on redirect #2: `http://anna.info/wiki/Main_Page`
Error: www subdomain does not support HTTPS Domain error: The www subdomain exists, but we couldn't connect to it using HTTPS ("x509: certificate is valid for tango.info, www.tango.info, not www.anna.info"). Since many people type this by habit, HSTS preloading would likely cause issues for your site.
Error: www subdomain does not support HTTPS Domain error: The www subdomain exists, but we couldn't connect to it using HTTPS ("x509: certificate is valid for anna.info, not www.anna.info"). Since many people type this by habit, HSTS preloading would likely cause issues for your site.