SNI certs now working, protocols output

We’ve added a few new features:

  • SNI (Server Name Indication) SSL certificates are now able to be detected and the websites scanned.
  • A list of accepted Protocols (i.e. SSLv3, TLS 1, TLS 1.1, TLS 1.2) is now output on the results screen.

Issue with TLSv1 sites fixed

We have fixed a bug where some servers that only allowed TLSv1 connections and did not gracefully downgrade the protocol were causing our tests to fail. We have put a fix in place to connect only via TLSv1 (except for the sslv3 check for POODLE) for cert and site checking, which will resolve this issue going forward.

Over 500,000 URLs Secured by WhyNoPadlock.com

We’re excited to announce a few new features on WhyNoPadlock.com

We’re also pleased to see that we have helped over 500,000 web pages become more secure!

New features:

  • SHA-1 check for certificates with expiration dates past 2015 that trigger a Chrome security warning
  • SSLv3 POODLE check
  • Checks for insecure form calls on a secure page that cause Chrome to show a security warning

We continue to develop and add to the tests we perform to help webmasters and designers have a fully secure experience for their customers and visitors.

New Fixes In Place, 27k pages analyzed

We have updated our service to properly handle the following issues:

  • Ability to properly handle/detect Subject Alternative Name (SAN) SSL certificates
  • Ability to properly handle/detect wildcard SSL certificates

We’ve also helped analyze and correct 27,710 secure pages as of this blog post! I’m happy we’re able to help make the web a safer and more secure place.  :)

We’ve Helped Secure Over 1,000 Web Pages So Far!

Woo Hoo!

In just two weeks, webmasters have analyzed over 1,000 secure web pages through WhyNoPadlock.com. It’s exciting to see this service help website owners and designers fully secure their checkout pages, their donation pages, etc…

We continue to tweak the service to maximize our detection of insecure items, improve the service, and provide more details.

We welcome your feedback, as it’s vital to help us help you get the most out of this service.

We look forward to many thousand more web pages being secured! :)