You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardexpand all lines: _data/subdomains.yml
+14-18
Original file line number
Diff line number
Diff line change
@@ -47,30 +47,27 @@ self-signed:
47
47
background: red
48
48
category: Certs
49
49
description: |
50
-
TODO
50
+
This certificate is not signed by a trusted CA, instead it is signed by the issuer.
51
51
sha1:
52
52
favicon: yellow
53
53
background: rgb(246, 207, 47)
54
54
category: Certs
55
55
description: |
56
-
The certificate for this site is signed using SHA-1<br>
57
-
and expires on Dec. 29, 2016.
56
+
The certificate for this site is signed using SHA-1 and expires on Dec. 29, 2016. This date is prior to the <a href="https://googleonlinesecurity.blogspot.ca/2014/09/gradually-sunsetting-sha-1.html">sunset date</a>.
58
57
sha1-2016:
59
58
favicon: yellow
60
59
background: rgb(246, 207, 47)
61
60
category: Certs
62
61
# TODO: Why is this important?
63
62
description: |
64
-
The certificate for this site is signed using SHA-1<br>
65
-
and expires on Dec. 29, 2016.
63
+
The certificate for this site is signed using SHA-1 and expires on Dec. 29, 2016. This date is prior to the <a href="https://googleonlinesecurity.blogspot.ca/2014/09/gradually-sunsetting-sha-1.html">sunset date</a>.
66
64
sha-2017:
67
65
favicon: red
68
66
background: red
69
67
category: Certs
70
68
# TODO: Why is this important?
71
69
description: |
72
-
The certificate for this site is signed using SHA-1<br>
73
-
and expires on Jan. 5, 2017.
70
+
The certificate for this site is signed using SHA-1 and expires on Jan. 5, 2017. This date is after to the <a href="https://googleonlinesecurity.blogspot.ca/2014/09/gradually-sunsetting-sha-1.html">sunset date</a>.
74
71
sha256:
75
72
favicon: green
76
73
background: green
@@ -177,19 +174,19 @@ dsdtestprovider:
177
174
background: red
178
175
category: Known-Bad
179
176
description: |
180
-
See https://blog.hboeck.de/archives/876-Superfish-2.0-Dangerous-Certificate-on-Dell-Laptops-breaks-encrypted-HTTPS-Connections.html
177
+
A MITM certificate installed on some Dell machines. <a href="https://blog.hboeck.de/archives/876-Superfish-2.0-Dangerous-Certificate-on-Dell-Laptops-breaks-encrypted-HTTPS-Connections.html">Hboeck source</a>.
181
178
edellroot:
182
179
favicon: red
183
180
background: red
184
181
category: Known-Bad
185
182
description: |
186
-
See https://blog.hboeck.de/archives/876-Superfish-2.0-Dangerous-Certificate-on-Dell-Laptops-breaks-encrypted-HTTPS-Connections.html
183
+
Another MITM certificate installed on some Dell machines. <a href="https://blog.hboeck.de/archives/876-Superfish-2.0-Dangerous-Certificate-on-Dell-Laptops-breaks-encrypted-HTTPS-Connections.html">Hboeck source</a>.
187
184
superfish:
188
185
favicon: red
189
186
background: red
190
187
category: Known-Bad
191
188
description: |
192
-
See blog.erratasec.com/2015/02/extracting-superfish-certificate.html
189
+
A MITM certificate installed on some Lenovo machines. <a href="http://blog.erratasec.com/2015/02/extracting-superfish-certificate.html">Erratasec source</a>.
193
190
194
191
### Misc ###
195
192
badssl.com:
@@ -249,8 +246,7 @@ mixed-script:
249
246
background: gray
250
247
category: Mixed
251
248
description: |
252
-
This page triggers active mixed content<br>
253
-
(a script from an insecure URL).
249
+
This page triggers active mixed content (a script from an insecure URL).
254
250
very:
255
251
favicon: red
256
252
background: red
@@ -270,7 +266,7 @@ hsts-https:
270
266
background: rgb(68, 136, 68)
271
267
category: Upgrade
272
268
description: |
273
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.">
269
+
TODO
274
270
https-everywhere-http:
275
271
favicon: red
276
272
background: rgb(170, 68, 68)
@@ -283,21 +279,21 @@ https-everywhere-https:
283
279
background: rgb(68, 136, 68)
284
280
category: Upgrade
285
281
description: |
286
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/redirect-test/status.svg" title="This is an image with an HTTP source location specified. If HTTPS Everywhere is working and activated, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
282
+
TODO
287
283
This domain will be upgraded to HTTPS if you use <a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a>.
288
284
preloaded-hsts-http:
289
285
favicon: red
290
286
background: rgb(170, 68, 68)
291
287
category: Upgrade
292
288
description: |
293
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
289
+
TODO
294
290
Preloaded in: Chrome 44, Firefox 41
295
291
preloaded-hsts-https:
296
292
favicon: green
297
293
background: rgb(68, 136, 68)
298
294
category: Upgrade
299
295
description: |
300
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
296
+
TODO
301
297
Preloaded in: Chrome 44, Firefox 41
302
298
subdomain.preloaded-hsts:
303
299
favicon: red
@@ -310,10 +306,10 @@ upgrade-http:
310
306
background: red
311
307
category: Upgrade
312
308
description: |
313
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/upgrade-test/upgrade-test.svg" title="This is an image with an HTTP source location specified. If upgrade-insecure-requests is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.">
309
+
TODO
314
310
upgrade-https:
315
311
favicon: green
316
312
background: rgb(68, 136, 68)
317
313
category: Upgrade
318
314
description: |
319
-
<img id="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/upgrade-test/upgrade-test.svg" title="This is an image with an HTTP source location specified. If upgrade-insecure-requests is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.">
Copy file name to clipboardexpand all lines: domains/upgrade/hsts-http/index.html
+2
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,8 @@
3
3
layout: page
4
4
---
5
5
6
+
<imgid="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.">
Copy file name to clipboardexpand all lines: domains/upgrade/https-everywhere-https/index.html
+2
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,8 @@
3
3
layout: page
4
4
---
5
5
6
+
<imgid="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/redirect-test/status.svg" title="This is an image with an HTTP source location specified. If HTTPS Everywhere is working and activated, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
Copy file name to clipboardexpand all lines: domains/upgrade/preloaded-hsts-http/index.html
+2
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,8 @@
3
3
layout: page
4
4
---
5
5
6
+
<imgid="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
Copy file name to clipboardexpand all lines: domains/upgrade/preloaded-hsts-https/index.html
+2
Original file line number
Diff line number
Diff line change
@@ -3,6 +3,8 @@
3
3
layout: page
4
4
---
5
5
6
+
<imgid="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/hsts-test/status.svg" title="This is an image with an HTTP source location specified. If HSTS is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome."><br>
Copy file name to clipboardexpand all lines: domains/upgrade/upgrade-https/index.html
+2
Original file line number
Diff line number
Diff line change
@@ -5,6 +5,8 @@
5
5
background: rgb(68, 136, 68)
6
6
---
7
7
8
+
<imgid="http-vs-https" src="http://{{ page.subdomain }}.{{ site.domain }}/upgrade-test/upgrade-test.svg" title="This is an image with an HTTP source location specified. If upgrade-insecure-requests is working, the source should be rewritten to HTTPS. The image will vary depending on the outcome.">
0 commit comments