ssllabs / ssllabs-scan

A command-line reference-implementation client for SSL Labs APIs, designed for automated and/or bulk testing.
https://www.ssllabs.com/projects/ssllabs-apis/
Apache License 2.0
1.69k stars 240 forks source link

Outdated Server Rating Guide Visuals #942

Open dbgeorge2 opened 9 months ago

dbgeorge2 commented 9 months ago

Upon reviewing the Server Rating Guide at https://github.com/ssllabs/research/wiki/SSL-Server-Rating-Guide, I've noticed that a score isn't assigned for supporting TLS 1.3.

I've also noticed that in the changelog for (8 Decemeber 2014) that 'using insecure DH parameters (less than 1024 bits) grade will be set to F', yet in the example provided near at the top of guide that key sizes of <512 are given a score of E and keys less than <1024 have a score of D.

The reason I bring this up is that I wish to manually calculate the grade and would appreciate being able to see the criteria being used alongside the scores being assigned. Essentially I want to see the actual math being carried out when determining the overall grade.

Any assistance with that would be appreciated. Thank you