SSL Configuration checker for F-Secure store/shop.

Blackcat

SSL Configuration Checker – allows organizations that rely on SSL for website security to assess their configurations. 

 

"This tool provides important guidance on how to reduce the ability of potential attackers to exploit faulty configurations".

 

I checked the F-Secure's main software buying site and it achieved a B-grade with the SSL Server Test; 

 

https://www.ssllabs.com/ssltest/analyze.html?d=https%3A%2F%2Fshop.f-secure.com%2Fcgi-bin%2Fshop%2Freg%3DGB%3FID%3DFSAV2013B%26omc%3DUK%26oml%3Den

 

In contrast another F-Secure store site, https://www.ssllabs.com/ssltest/analyze.html?d=http%3A%2F%2Fwww.edv-buchversand.de%2Ff-secure%2F and another 9 AntiVirus purchase sites I checked scored A.  

 

Should we be concerned about the B-grade?

 

 

 

 

 

Blackcat

Bump 

Blackcat

Bump again.

Fendy

Hi Blackcat,

 

We are checking this with the web team. Will provide an update to you asap.

 

---
Best regards,
Fendy

Blackcat

And another bump.

Chrissy

Hi Blackcat!

 

Apparently the issue's source has several persons to go through to get the answer, but rest assured, the process is rolling and we'll report back any updates as soon as there are any!

 

// Chrissy

Blackcat

This time an esteemed bump 

NikK

A well earned one Blackcat

Blackcat

Thanks, NikK. 

Chrissy

Nothing to report, yet... I'll follow up on my last request for info.

Chrissy

Hello!

 

Thanks for being so patient   I have now received the following information regarding this issue:

 

"Asknet is now running the system with preferred TLS 1.2. security protocol,  which leads to the following result at Qualys SSL Labs:

https://www.ssllabs.com/ssltest/analyze.html?d=shop.f-secure.com&hideResults=on

 

 

Thanks, Blackcat, for pushing the issue!

 

// Chrissy

 

NikK

Great! But where is Blackcat?? Hasn't been here for weeks......

Simon

It's been a couple of weeks, but he's certainly conspicuous in his absence.  Perhaps he's just taking a break?