search

edvinanet / tls-o-matic

TLS labs
Creative Commons Zero v1.0 Universal
30 stars 6 forks source link

Usage of reserved ports #7

Open oej opened 9 years ago

oej commented 9 years ago

Sindarina on twitter: "Still on reserved ports? Bad form, that. I could understand needing to support older tests, but publishing new ones with them?!"

oej commented 9 years ago

This is an area where there aren't many reserved ports and fortunately I don't think we have a collision yet. We are very close though :-)

It was a simple way to set up the tests for everyone - even older clients without SNI - to be able to reach them. When time permits, I will set up tests on unreserved ports too and migrate.

I think you also suggested earlier to implement all tests over SNI, which may be an interesting test.

List of ports - we currently collide with 401 only.

401 TCP UDP UPS Uninterruptible Power Supply Official 427 TCP UDP Service Location Protocol (SLP) Official 433 TCP UDP NNSP, part of Network News Transfer Protocol Official 443 TCP Hypertext Transfer Protocol over TLS/SSL (HTTPS) Official 443 UDP QUIC (from Chromium) for HTTPS Unofficial 444 TCP UDP SNPP, Simple Network Paging Protocol (RFC 1568) Official 445 TCP Microsoft-DS Active Directory, Windows shares

oej commented 9 years ago

Adding new tests on port 60430 and up. Also added this port range to most of the old tests. Will have to spend time on figuring out how to set up the SNI tests on multiple ports without having to run multiple web servers.