{"action":"created","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/5","id":60208704,"number":5,"title":"interface.cloudvps.com - admin interface for cloud provider","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Client-Side%20Cipher%20Ordering","name":"Client-Side Cipher Ordering","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/DH%201024-bit","name":"DH 1024-bit","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Lacks%20Robust%20PFS","name":"Lacks Robust PFS","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/MD5","name":"MD5","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4%20Preferred","name":"RC4 Preferred","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/TLSv1%20Only","name":"TLSv1 Only","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-03-07T14:37:38Z","updated_at":"2015-05-20T08:05:22Z","closed_at":null,"body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=interface.cloudvps.com\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: interface.cloudvps.com:443\r\n\r\nprio  ciphersuite           protocols  pfs_keysize\r\n1     DHE-RSA-AES256-SHA    TLSv1      DH,1024bits\r\n2     AES256-SHA            TLSv1\r\n3     DHE-RSA-AES128-SHA    TLSv1      DH,1024bits\r\n4     AES128-SHA            TLSv1\r\n5     RC4-SHA               TLSv1\r\n6     RC4-MD5               TLSv1\r\n7     EDH-RSA-DES-CBC3-SHA  TLSv1      DH,1024bits\r\n8     DES-CBC3-SHA          TLSv1\r\n\r\nCertificate: trusted, 2048 bit, sha256WithRSAEncryption signature\r\nTLS ticket lifetime hint: None\r\nOCSP stapling: not supported\r\nClient side cipher ordering\r\n```\r\n**Verdict**\r\nRC4 still on, no Forward Secrecy, 1024-bit DH keys, etc. This is the admin interface for a Dutch cloud provider, CloudVPS. It is the primary control interface for any virtual machines hosted with them, and should therefore do much better than this. They have been warned about this several times over the past year, and have yet to up their game."},"comment":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/comments/103802658","html_url":"https://github.com/isvsecwatch/httpstracker/issues/5#issuecomment-103802658","issue_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5","id":103802658,"user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"created_at":"2015-05-20T08:05:22Z","updated_at":"2015-05-20T08:05:22Z","body":"In light of the details of the Logjam attack (https://weakdh.org/), we are upgrading 1024-bit DH keys to a red level issue that should be resolved, as that key size puts it within reach of state-level adversaries and is no longer considered safe.\r\n\r\nSee https://github.com/isvsecwatch/httpstracker#a-note-on-dhdhe for details."}}