[{"data":1,"prerenderedAt":347},["ShallowReactive",2],{"project-9271946":3},{"id":4,"name":5,"line":6,"line_source":7,"title":8,"url":9,"domain":10,"maker":11,"posted_at":12,"year":13,"points":14,"comments":15,"rank_in_year":16,"shown_in_year":17,"top":18,"tier":19,"category":20,"subcategory":21,"format":22,"keywords":23,"reception":29,"sentiment":30,"stance_mix":31,"scored_comments":36,"aspects":37,"strip":44,"post_text":45,"what":46,"said":62,"maker_in_thread":196,"shape":206,"grid":209,"attempts":309,"same_week":310,"maker_shows":43,"maker_hidden":340,"reader_version":341,"card":342},"9271946","SSL Decoder","An open-source alternative for the SSL Labs server test","title","Show HN: SSL Decoder – An open-source alternative for the SSL Labs server test","https:\u002F\u002Ftls.so","tls.so","mdewinter",1427393902,2015,160,42,124,2565,5,"notable","security_privacy","ssl tls testing","web_app",[24,25,26,27,28],"ssl test","tls checker","certificate validation","ssl labs alternative","cipher enumeration","mixed",0.2,{"positive":32,"neutral":33,"mixed":34,"critical":35},9,6,1,4,20,{"idea":38,"execution":41,"design":42},{"positive":39,"critical":40},3,0,{"positive":40,"critical":35},{"positive":43,"critical":40},2,[40,18,40,18,40,40,18,39,39,34,39,40,40,40,39,39,40,34,40,34,40,18,40,18,39,40,40,40,18,40,40,40,18,34,40,40,40,40,39,18],null,{"problem":47,"audience":45,"pricing":45,"motivation":45,"time_to_build":54,"stack":58,"openness":59,"stage":60,"team_size":61},{"value":48,"source":49,"evidence":50},"Checks SSL\u002FTLS certificates, chains, CRLs, OCSP and server ciphers, giving detailed information instead of a single rating","maker",[51],{"id":52,"by":11,"text":53},"9271961","My weekend project. * Tries to give all the information you need instead of a rating. * Open source, so you can self host it. * Does the entire certificate chain. * Allows to…",{"value":55,"source":49,"evidence":56},"A weekend project",[57],{"id":52,"by":11,"text":53},[],"open_source","launched","solo",{"praise":63,"objections":94,"requests":135,"questions":164,"alternatives":176},[64,76,83],{"value":65,"source":66,"evidence":67},"Open source alternative to SSL Labs","commenter",[68,72],{"id":69,"by":70,"text":71},"9272852","eyeareque","Nice work. This will help a lot of people who audit sites.. and its great to have an open alternative to the closed source ssllabs tester.",{"id":73,"by":74,"text":75},"9285127","humanarity","Thank you for putting this all together and making it open source. By the way, will you be releasing an API? I think this API would be really valuable.",{"value":77,"source":66,"evidence":78},"Clean design with clear health check marks",[79],{"id":80,"by":81,"text":82},"9273087","billyhoffman","I really like the nice big horizontal check marks for the \"health\" of each aspect of the certificates. Thank you for releasing this.",{"value":84,"source":66,"evidence":85},"Short domain name and useful tool",[86,90],{"id":87,"by":88,"text":89},"9272094","david_shaw","This is pretty great (and you even managed to snag a short domain name)! For those who are trying to use the command line (rather than a webapp), \"sslscan\" performs these checks…",{"id":91,"by":92,"text":93},"9272247","cookiecaper","Thanks. Just needed something like this last week.",[95,106,113,124],{"value":96,"source":66,"evidence":97},"Does not check SSLv2 or older protocol negotiation",[98,102],{"id":99,"by":100,"text":101},"9272506","abarringer","Thanks, looks great! I'd like to see a check for SSLv2. For instance this site supports sslv2 and it should be flagged: download.biscom.com.…",{"id":103,"by":104,"text":105},"9273006","MichaelGG","Feature\u002Fbug: It doesn't seem to attempt to explicitly negotiate older protocols. For instance, I'm dealing with a site that still has SSLv2 and export ciphers enabled if a client…",{"value":107,"source":66,"evidence":108},"Does not detect IPv6 on dual-stacked hosts",[109],{"id":110,"by":111,"text":112},"9276051","simon_vetter","If your hostname is dual stacked it only checks for ipv4 afaik.",{"value":114,"source":66,"evidence":115},"Flags 3DES ciphers and RC4 which users cannot easily change on load balancers",[116,120],{"id":117,"by":118,"text":119},"9274214","deathanatos","These services always dock me for including RC4 ciphers. I understand that these are bad because RC4 is broken or near broken; I shouldn't be using it. However, I'm simply using…",{"id":121,"by":122,"text":123},"9273489","yrro","I've tweaked my Apache configuration but don't seem to be able to trigger a rescan--the cipher list doesn't appear to change. I guess it's cached for a little while, but the UI…",{"value":125,"source":66,"evidence":126},"Serial numbers highlighted in red look like errors",[127,131],{"id":128,"by":129,"text":130},"9273335","gkoz","Why are certificate serials highlighted in red?",{"id":132,"by":133,"text":134},"9273596","saganus","Maybe he meant that coloring them red means that something went wrong or that there's something that you should pay attention to. Of course I'm just speculating here.",[136,140,146,150,157],{"value":137,"source":66,"evidence":138},"API for results",[139],{"id":73,"by":74,"text":75},{"value":141,"source":66,"evidence":142},"IPv6 support",[143],{"id":144,"by":111,"text":145},"9275299","Thanks for doing this, awesome job. May I request IPv6 support?",{"value":147,"source":66,"evidence":148},"SSLv2 detection",[149],{"id":99,"by":100,"text":101},{"value":151,"source":66,"evidence":152},"Summary of concerns at top of report",[153],{"id":154,"by":155,"text":156},"9272073","Silhouette","Nice. Friendly suggestion: Show a prominent summary at the top of the report of any areas of concern.",{"value":158,"source":66,"evidence":159},"ChaCha20 enumeration and BoringSSL detection",[160],{"id":161,"by":162,"text":163},"9274132","iancarroll","Few notes: - Does not enumerate ChaCha20 - Doesn't detect BoringSSL - try running it on certly.io",[165,172],{"value":166,"source":66,"evidence":167},"How does it determine the destination SSL library?",[168],{"id":169,"by":170,"text":171},"9275140","smy1es","Nice work. How do you determine the destination SSL library?",{"value":173,"source":66,"evidence":174},"Can results be rescanned after config changes?",[175],{"id":121,"by":122,"text":123},[177,184,189],{"value":178,"source":66,"evidence":179},"sslscan command line tool",[180,181],{"id":87,"by":88,"text":89},{"id":182,"by":81,"text":183},"9273073","+1 to SSLScan. Last time I checked though, the Windows builds don't work\u002Fsupport the XML output option. Automating this last year involved capturing STDOUT and regexing...",{"value":185,"source":66,"evidence":186},"SSL Labs server test",[187,188],{"id":99,"by":100,"text":101},{"id":69,"by":70,"text":71},{"value":190,"source":66,"evidence":191},"ssltest by jamescun",[192],{"id":193,"by":194,"text":195},"9272194","jamescun","I started to build a similar thing, for the command line, last year but did not get as far. https:\u002F\u002Fgithub.com\u002Fjamescun\u002Fssltest",{"comments":197,"answered":43,"key":198},7,[199,200,203],{"id":52,"text":53},{"id":201,"text":202},"9272217","I do have a JSON (plain text, readable json) output endpoint planned, but that will be GET as well. Pull requests are welcome though.",{"id":204,"text":205},"9273410","It also does custom ports and protocols, for example 8443, 465 (SMTP), 994\u002F995(POP\u002FIMAP) etc.",{"commenters":207,"max_depth":18,"maker_replies":197,"first_comment_mins":43,"lifespan_hours":208},30,69,[210,212,214,216,220,222,223,226,228,230,232,233,237,240,242,244,246,249,250,253,254,255,257,259,262,264,266,268,270,273,275,279,282,285,287,291,294,297,299,301,303,305],[52,40,40,211,11,34],"maker\u002Fpositive\u002Fidea",[87,40,18,213,88,40],"project\u002Fpositive\u002Fnone",[182,40,40,215,81,40],"other\u002Fneutral\u002Fnone",[217,40,18,218,219,40],"9272127","project\u002Fpositive\u002Fidea","toomuchtodo",[201,40,40,221,11,34],"maker\u002Fneutral\u002Fnone",[204,40,40,218,11,34],[224,40,18,213,225,40],"9274363","zaphoyd",[144,40,39,227,111,40],"project\u002Fneutral\u002Fnone",[229,40,39,227,225,40],"9275767",[110,40,34,231,111,40],"project\u002Fcritical\u002Fexecution",[117,34,39,227,118,40],[234,34,40,235,236,40],"9274249","commenter\u002Fneutral\u002Fnone","wampus",[238,34,40,235,239,40],"9274356","spydum",[241,34,40,235,111,40],"9276279",[99,43,39,243,100,40],"project\u002Fmixed\u002Fnone",[121,39,39,245,122,40],"project\u002Fneutral\u002Fexecution",[247,39,40,235,248,40],"9274918","nuxi7",[103,35,34,231,104,40],[251,35,40,252,11,34],"9273142","maker\u002Fneutral\u002Fexecution",[193,18,40,215,194,40],[161,33,34,231,162,40],[256,33,40,252,11,34],"9275436",[154,197,18,258,155,40],"project\u002Fpositive\u002Fdesign",[260,197,40,261,11,34],"9272107","maker\u002Fneutral\u002Fdesign",[80,263,18,258,81,40],8,[128,32,39,265,129,40],"project\u002Fneutral\u002Fdesign",[267,32,40,261,11,34],"9273405",[132,32,40,269,133,40],"commenter\u002Fneutral\u002Fdesign",[271,32,40,269,272,40],"9275192","lvillani",[73,274,18,218,74,40],10,[276,277,40,215,278,40],"9272448",11,"carsonreinke",[280,277,40,215,281,40],"9272534","bodyfour",[283,277,40,215,284,40],"9272588","tracker1",[69,286,18,218,70,40],12,[288,289,34,231,290,40],"9272470",13,"baconhigh",[292,289,40,235,293,40],"9272501","smt88",[295,289,40,235,296,40],"9274332","jjoe",[298,289,40,235,293,40],"9274890",[300,289,40,235,296,40],"9284479",[169,302,39,245,170,40],14,[91,304,18,213,92,40],15,[306,307,18,213,308,40],"9273747",16,"owly",[],[311,316,321,326,331,336],{"id":312,"name":313,"points":314,"category":315},"9297316","Netlify",116,"infrastructure",{"id":317,"name":318,"points":319,"category":320},"9295596","Notello",100,"productivity",{"id":322,"name":323,"points":324,"category":325},"9290087","Chrome",72,"dev_tools",{"id":327,"name":328,"points":329,"category":330},"9291842","Bitterness",67,"consumer_social",{"id":332,"name":333,"points":334,"category":335},"9298338","Boids",63,"learning_science",{"id":337,"name":338,"points":339,"category":325},"9270096","PencilCase",52,false,"v2",{"id":343,"name":5,"line":6,"ai":340,"cat":20,"year":13,"points":14,"comments":15,"rec":29,"s":30,"top":18,"kw":344,"maker":11,"domain":10,"tier":19,"attempts":40,"strip":345,"url":9,"mix":346,"praise":65,"objection":96,"sub":21},9271946,[24,25,26,27,28],"0505005331300033010105053000500051000035",[32,33,34,35],1794036529801]