Tag: Qualys Security Labs

2015

• Introducing TLS Maturity Model
  June 08, 2015
• SSL Labs: Increased penalty when TLS 1.2 is not supported
  May 22, 2015
• SSL Labs 1.17: RC4, Obsolete Crypto, and Logjam
  May 21, 2015
• What's new in SSL Labs 1.16
  April 28, 2015
• SSL Labs RC4 deprecation plan
  April 23, 2015
• OpenSSL Cookbook 2nd Edition released
  March 03, 2015
• SSL Labs APIs now available in Beta
  January 22, 2015

2014

• SSL Labs end of year 2014 updates
  December 08, 2014
• POODLE bites TLS
  December 08, 2014
• SSL 3 is dead, killed by the POODLE attack
  October 15, 2014
• SHA1 deprecation: what you need to know
  September 09, 2014
• SSL Labs: New grades for trust (T) and mismatch (M) issues
  June 17, 2014
• SSL Pulse: 49% vulnerable to CVE-2014-0224, 14% exploitable
  June 13, 2014
• SSL Labs test for the Heartbleed attack
  April 08, 2014
• SSL Labs: Stricter security requirements for 2014
  January 21, 2014

2013

• Apple enabled BEAST mitigations in OS X 10.9 Mavericks
  October 31, 2013
• SSL Pulse now tracking Forward Secrecy and RC4
  October 09, 2013
• OpenSSL Cookbook v1.1 released
  October 08, 2013
• Introducing the SSL Client Test
  October 02, 2013
• Updated SSL/TLS Deployment Best Practices deprecates RC4
  September 17, 2013
• Is BEAST still a threat?
  September 10, 2013
• Defending against the BREACH attack
  August 07, 2013
• Configuring Apache, Nginx, and OpenSSL for Forward Secrecy
  August 05, 2013
• Deploying Forward Secrecy
  June 25, 2013
• RC4 in TLS is broken: Now what?
  March 19, 2013
• SSL Labs update increases security requirements
  February 07, 2013

2012

• CRIME: Information leakage attack against SSL/TLS
  September 14, 2012
• Protocol-level evasion of web application firewalls
  July 25, 2012
• How good is client-side support for RC4?
  July 17, 2012
• ModSecurity and ModSecurity Core Rule Set Multipart Bypasses
  June 15, 2012
• Announcing SSL Pulse
  April 30, 2012
• Qualys supports reform at CA/Browser Forum
  March 30, 2012
• SSL and Browsers: The Pillars of Broken Security
  March 07, 2012
• Announcing the SSL/TLS Deployment Best Practices guide
  February 23, 2012

2011

• TLS Renegotiation and Denial of Service Attacks
  October 31, 2011
• Mitigating the BEAST attack on TLS
  October 17, 2011
• SSL Labs: Announcing launch of two Convergence notaries
  September 29, 2011

2010

• Disabling SSL renegotiation is a crutch, not a fix
  October 06, 2010

2009

• SSL and TLS Authentication Gap vulnerability discovered
  November 05, 2009