TLS (Transport Layer Security)

Vulnerabilities

• DROWN;

• BREACH;

• FREAK;

• Longjam;

• HeartBleed;

• CRIME;

• POODLE;

Implementations

• AWS s2n;

• libtlssep;

Testing

• https://www.ssllabs.com/ssltest;

• https://sslanalyzer.comodoca.com/;

• http://testssl.sh/;

• https://github.com/DinoTools/sslscan;

• https://github.com/rbsec/sslscan;

• https://github.com/jvehent/cipherscan;

Links

• https://github.com/ssllabs/research/wiki/Assessment-Tools;

• http://news.netcraft.com/archives/2013/06/25/ssl-intercepted-today-decrypted-tomorrow.html;

• https://community.qualys.com/blogs/securitylabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy;

• https://community.qualys.com/blogs/securitylabs/2013/06/25/ssl-labs-deploying-forward-secrecy;

• https://www.ssllabs.com/projects/best-practices;

• http://vincent.bernat.im/en/blog/2011-ssl-benchmark.html;

• http://vincent.bernat.im/en/blog/2011-ssl-benchmark-round2.html;

• http://www.hezmatt.org/~mpalmer/blog/2011/06/28/ssl-session-caching-in-nginx.html;

• http://www.cs.utexas.edu/~shmat/shmat_ccs12.pdf;

• https://www.ssllabs.com/projects/best-practices;

• https://www.ssllabs.com/projects/ssl-threat-model;

• https://www.ietf.org/mailman/listinfo/tls;

• https://github.com/nabla-c0d3/sslyze;

• https://www.ssllabs.com/downloads/SSL_Threat_Model.png;

• http://tools.ietf.org/rfc/rfc6962.txt;

• http://www.nist.gov/manuscript-publication-search.cfm?pub_id=915295;