{"action":"created","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/13","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/13/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/13/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/13","id":62246394,"number":13,"title":"account.dyn.com - management interface for DNS provider","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Bad%20Cipher%20Ordering","name":"Bad Cipher Ordering","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/DH%201024-bit","name":"DH 1024-bit","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/MD5","name":"MD5","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20ECDHE","name":"No ECDHE","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20Forward%20Secrecy","name":"No Forward Secrecy","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/TLS%20Compression","name":"TLS Compression","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/TLSv1%20Only","name":"TLSv1 Only","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-03-17T00:50:12Z","updated_at":"2015-03-17T00:53:16Z","closed_at":null,"body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=account.dyn.com (B)\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: account.dyn.com:443\r\n\r\nprio  ciphersuite              protocols  pfs_keysize\r\n1     DHE-RSA-AES256-SHA       TLSv1      DH,1024bits\r\n2     DHE-RSA-CAMELLIA256-SHA  TLSv1      DH,1024bits\r\n3     AES256-SHA               TLSv1\r\n4     CAMELLIA256-SHA          TLSv1\r\n5     EDH-RSA-DES-CBC3-SHA     TLSv1      DH,1024bits\r\n6     DES-CBC3-SHA             TLSv1\r\n7     DHE-RSA-AES128-SHA       TLSv1      DH,1024bits\r\n8     DHE-RSA-CAMELLIA128-SHA  TLSv1      DH,1024bits\r\n9     AES128-SHA               TLSv1\r\n10    CAMELLIA128-SHA          TLSv1\r\n11    DHE-RSA-SEED-SHA         TLSv1      DH,1024bits\r\n12    SEED-SHA                 TLSv1\r\n13    IDEA-CBC-SHA             TLSv1\r\n14    RC4-SHA                  TLSv1\r\n15    RC4-MD5                  TLSv1\r\n\r\nCertificate: trusted, 2048 bit, sha256WithRSAEncryption signature\r\nTLS ticket lifetime hint: None\r\nOCSP stapling: not supported\r\nServer side cipher ordering\r\n```\r\n**Verdict**\r\nMultiple problems that have been reported privately over a month ago, and might now be resolved in two weeks, when they finally get around to it. We should all expect better from a DNS provider that wants to play in the 'enterprise' space."},"comment":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/comments/82008595","html_url":"https://github.com/isvsecwatch/httpstracker/issues/13#issuecomment-82008595","issue_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/13","id":82008595,"user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"created_at":"2015-03-17T00:53:16Z","updated_at":"2015-03-17T00:53:16Z","body":"This was first reported privately, as a Dyn customer, on February 12th. A reminder was sent on March 7th, after no action had been taken yet. Their reply earlier today was that 'start making various updates to help address some of the concerns in the report you sent along in roughly two weeks time'.\r\n\r\nSix weeks to fix issues like being vulnerable to the CRIME attack, something that should have been sorted ages ago. That is simply NOT good enough.\r\n"}}