Should owners/operateros of certain web sites need a license?

1 point

11 years ago

Take for example, this healthcare provider that has an F rating on the crypto used for the site:

https://www.ssllabs.com/ssltest/analyze.html?d=mychartor.providence.org

This server is vulnerable to the POODLE attack against TLS servers. Patching required. Grade set to F.

This server is vulnerable to MITM attacks because it supports insecure renegotiation. Grade set to F.

This server uses SSL 3, which is obsolete and insecure. Grade capped to B.

This server uses RC4 with modern browsers. Grade capped to C.

This healthcare provider clearly should not be allowed on the web as they have no clue about security.

1 comment