RapydBlok – 2020 in Review
“HTTPS & SSL doesn’t mean “trust this.” It means “this is private.” You may be having a private conversation with Satan.” – Scott Hanselman
“Best wishes for the festive season from the RapydBlok team. 2020 hasn’t been the easiest year for most, but with all it’s challenges we have persevered. Well wishes for 2021 are in order.”
RapydBlok achieved some milestones this year including;
- A new product, INSPECT Web App, that can inspect website https security – inspect.rapydblok.com
- Fixed some bugs, added multi-threading for SCANS and improved on reporting and email delivery of results.
- Introduced #ScanFriday, to encourage regular security scanning.
- Gordon emigrated from Cape Town to Munich.
๐๐ผ๐ ๐ฐ๐ฎ๐ป ๐๐ก๐ฆ๐ฃ๐๐๐ง ๐ต๐ฒ๐น๐ฝ ๐บ๐ฒ โ Most websites have SSL certificates to secure web traffic, ๐๐ก๐ฆ๐ฃ๐๐๐ง will review the SSL certificate & web server configuration for any related issues and display the full results.
Summary of the common issues found during SSL scans;
It’s not secure enough to just install an SSL certificate, correct configuration is key!
- ๐ ๐ช๐จ๐ฉ ๐๐ฃ๐จ๐ฉ๐๐ก๐ก๐๐ฃ๐ ๐๐ฃ ๐๐๐ ๐๐๐ง๐ฉ๐๐๐๐๐๐ฉ๐ ๐๐จ ๐ฃ๐ค๐ฉ ๐๐ฃ๐ค๐ช๐๐ ๐ฉ๐ค ๐จ๐๐๐ช๐ง๐ ๐๐๐/๐๐๐, it needs to be configured correctly on the web server & some web admins are unaware of this.
- ๐ฟ๐๐ฅ๐ง๐๐๐๐๐ฉ๐๐ ๐๐ง๐ค๐ฉ๐ค๐๐ค๐ก๐จ ๐๐ง๐ ๐๐ค๐ฃ๐๐๐๐ช๐ง๐๐, mainly TLS 1 & TLS1.1 are offered in configuration but actually depreciated. Min of TLS v1.2 and TLS 1.3 should be offered.
- ๐๐จ๐๐ฃ๐ ๐ค๐๐จ๐ค๐ก๐๐ฉ๐ ๐ค๐ง ๐ค๐ก๐ ๐๐๐ฅ๐๐๐ง๐จ, for certificates often requires a review and Mozilla has some good recommendations on ciphers & client support.
- ๐๐ช๐ก๐ฃ๐๐ง๐๐๐๐ก๐๐ฉ๐๐๐จ, if old or obsolete Ciphers and Protocols are used, it can generally lead to vulnerabilities being available for that host.
- ๐๐๐๐ช๐ง๐๐ฃ๐ ๐ฌ๐๐ฉ๐ TLS 1.3 ๐ค๐ฃ๐ก๐ฎ, doesnโt allow for all web clients to connect, especially older ones but most importantly Internet Explorer users cant connect.
Shoutout to the testssl.sh team, without them there wouldn’t be an INSPECT product
Keep watching this space in 2021, the RapydBlok team will keep pushing the limits and do some great releases.
All the best, Frรถhliche Weihnachten & Happy Holidays
Gordon Bishop – co-founder
