Enhancement request: Switch from SSL labs test to new Observatory by Mozilla

gavinhungry / cipherfox

:fox_face: Displays the current SSL/TLS cipher, protocol and certificate chain in the Firefox Add-on bar and Site ID dialog

https://addons.mozilla.org/en-US/firefox/addon/cipherfox/

Mozilla Public License 2.0

35 stars 9 forks source link

Enhancement request: Switch from SSL labs test to new Observatory by Mozilla #46

Closed GdrjirfRtrUhYUdrjUMm closed 7 years ago

GdrjirfRtrUhYUdrjUMm commented 7 years ago

Observatory by Mozilla, https://observatory.mozilla.org, performs tests that SSL labs does not but also simultaneously tests with SSL labs, htbridge.com, tls.imirhil.fr, securityheaders.io, and hstspreload.org. It also gives preliminary results faster while the other tests have not yet finished.

Cai0407 commented 7 years ago

Yes, it seems to be a better choice.

gavinhungry commented 7 years ago

I like this as well, and it is an easy change to implement.

wolfbeast commented 7 years ago

I greatly prefer Qualys and don't necessarily want to broadcast to all of the observatory-linked sites what I'm testing.

In addition, the Mozilla observatory:

Makes assumptions about what is considered "good practice" that are debatable
Isn't providing a full report itself
Is calling anything that isn't exactly "as per Mozilla's decisions" to be non-compliant (such BS, sorry but it is!)

So, if you want to change this, please, please make it configurable, and keep a sane default like Qualys or HT Bridge.

gavinhungry commented 7 years ago

I think we'll leave Qualys for now. We can reopen this later as needed.