Title: SSL Best Practices and Testing  
Author: Phil Benchoff Sep 12, 2012
Last Changed by: Phil Benchoff May 27, 2014
Tiny Link: (useful for email) https://confluence.pprd.es.cloud.vt.edu/x/n4BZJQ
Export As: Word · PDF  
Hierarchy
Parent Page
    Page: SSL
Labels
Global Labels (2)
Recent Changes
Time Editor  
May 27, 2014 10:55 Phil Benchoff  
Outgoing Links
External Links (22)
    blog.ivanristic.com/2009/08/is-rc4-safe-for-use-in-ssl.html
    scottlinux.com/2011/11/03/how-to-check-for-ssl-renegotiatio…
    https://www.ssllabs.com/
    https://community.qualys.com/blogs/securitylabs/2012/09/14/…
    www.openssl.org/docs/apps/ciphers.html
    googleonlinesecurity.blogspot.com/2013/11/a-roster-of-tls-c…
    https://secure.wikimedia.org/wikipedia/en/wiki/Server_Name_…
    https://www.titania-security.com/labs/sslscan
    https://owasp.org/index.php/Transport_Layer_Protection_Chea…
    https://wiki.mozilla.org/Security/Server_Side_TLS
    https://github.com/iSECPartners/sslyze/wiki
    https://labs.ripe.net/Members/aaron_kaplan/better-crypto
    feeding.cloud.geek.nz/2011/11/ideal-openssl-configuration-f…
    matt.io/technobabble/hivemind_devops_alert:_nginx_does_not_…
    zombe.es/post/4078724716/openssl-cipher-selection
    https://secure.wikimedia.org/wikipedia/en/wiki/HTTP_Strict_…
    https://www.ssllabs.com/ssltest/
    https://www.ssllabs.com/projects/
    https://community.qualys.com/blogs/securitylabs/2013/03/19/…
    en.wikipedia.org/wiki/AES_instruction_set
    https://github.com/iSECPartners/sslyze
    www.openssl.org/docs/ssl/SSL_CTX_set_options.html