Encyclopaedia Metallum: The Metal Archives

Message board

* FAQ    * Search   * Register   * Login 



Reply to topic
Author Message Previous topic | Next topic
metalmetal999
Mallcore Kid

Joined: Sat Aug 04, 2018 10:09 am
Posts: 3
PostPosted: Sat Aug 04, 2018 10:14 am 
 

Hello guys,

Your server aren't secure and may be blocked in Chrome & Firefox in near future!
Why? Well, look: https://www.ssllabs.com/ssltest/analyze ... chives.com

This server supports weak Diffie-Hellman (DH) key exchange parameters.
The server supports only older protocols, but not the current best TLS 1.2
This server accepts RC4 cipher, but only with older protocols
This server does not support Forward Secrecy with the reference browsers
This server does not support Authenticated encryption (AEAD) cipher suite


You should fix this ASAP!

Also with whole domain, the main site and the forum is affected!

Top
 Profile  
Derigin
The Mountain Man

Joined: Sun Jan 01, 2006 6:25 am
Posts: 5172
Location: Canada
PostPosted: Thu Aug 09, 2018 10:44 pm 
 

Thank you for raising this issue with us. The webmasters have been notified.
_________________
¯\_(ツ)_/¯

R.I.P. Diamhea 1987-2018
Live young, die free. Gone, but not forgotten.

Top
 Profile  
metalmetal999
Mallcore Kid

Joined: Sat Aug 04, 2018 10:09 am
Posts: 3
PostPosted: Fri Sep 21, 2018 10:06 am 
 

How is the status?
It's now 1,5 month's later and no answer from webmaster

Top
 Profile  
metalmetal999
Mallcore Kid

Joined: Sat Aug 04, 2018 10:09 am
Posts: 3
PostPosted: Sun Oct 21, 2018 11:31 am 
 

Since your maintenance its better now, but still few problems:
https://www.ssllabs.com/ssltest/analyze ... chives.com

This server accepts RC4 cipher, but only with older protocols. Grade capped to B.
This server does not support Forward Secrecy with the reference browsers. Grade capped to B.

Top
 Profile  
HouseSpiders
Heavy Metal C-3PO

Joined: Tue Aug 02, 2011 7:05 am
Posts: 531
Location: United Kingdom
PostPosted: Sun Oct 21, 2018 3:27 pm 
 

Excellent finds. Was it this thread that inspired the server migration?
_________________
vacca wrote:
"Pointwhoring is no fun. Pointwhoring endangers the life and happiness of millions. It must stop. We appeal in particular to the youth of today, stop the madness. There are better things in life."

Top
 Profile  
Display posts from previous:  Sort by  
Reply to topic


Who is online

Users browsing this forum: Rompestromper and 1 guest


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

 
Jump to:  

Back to the Encyclopaedia Metallum


Powered by phpBB © 2000, 2002, 2005, 2007 phpBB Group