{"action":"created","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/40","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/40/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/40/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/40/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/40","id":73129013,"number":40,"title":"store.diditbetter.com - order/ecommerce website","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Bad%20Cipher%20Ordering","name":"Bad Cipher Ordering","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Insecure","name":"Insecure","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Lacks%20Robust%20PFS","name":"Lacks Robust PFS","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/MD5","name":"MD5","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20Forward%20Secrecy","name":"No Forward Secrecy","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/SSLv2","name":"SSLv2","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/SSLv3","name":"SSLv3","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/TLSv1%20Only","name":"TLSv1 Only","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-05-04T21:13:34Z","updated_at":"2015-07-15T16:13:42Z","closed_at":null,"body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=store.diditbetter.com (F)\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: store.diditbetter.com:443\r\n\r\nprio  ciphersuite           protocols          pubkey_size  signature_algorithm      trusted  ticket_hint  ocsp_staple  pfs_keysize\r\n1     AES128-SHA            TLSv1              2048         sha256WithRSAEncryption  True     None         True\r\n2     AES256-SHA            TLSv1              2048         sha256WithRSAEncryption  True     None         True\r\n3     RC4-SHA               SSLv3,TLSv1        2048         sha256WithRSAEncryption  True     None         True\r\n4     DES-CBC3-SHA          SSLv3,TLSv1        2048         sha256WithRSAEncryption  True     None         True\r\n5     ECDHE-RSA-AES128-SHA  TLSv1              2048         sha256WithRSAEncryption  True     None         True         ECDH,P-256,256bits\r\n6     ECDHE-RSA-AES256-SHA  TLSv1              2048         sha256WithRSAEncryption  True     None         True         ECDH,P-256,256bits\r\n7     RC4-MD5               SSLv2,SSLv3,TLSv1  2048         sha256WithRSAEncryption  True     None         True\r\n8     DES-CBC3-MD5          SSLv2              2048         sha256WithRSAEncryption  False    None         False\r\n\r\nOCSP stapling: supported\r\nServer side cipher ordering\r\n```\r\n**Cipherscan Analysis**\r\n```\r\nstore.diditbetter.com:443 has bad ssl/tls\r\n\r\nThings that are bad:\r\n* remove cipher RC4-SHA\r\n* remove cipher RC4-MD5\r\n* remove cipher DES-CBC3-MD5\r\n* disable SSLv2\r\n\r\nChanges needed to match the intermediate level:\r\n* remove cipher RC4-SHA\r\n* remove cipher RC4-MD5\r\n* remove cipher DES-CBC3-MD5\r\n* disable SSLv3\r\n* disable SSLv2\r\n* consider enabling TLSv1.1\r\n* consider enabling TLSv1.2\r\n* consider enabling OCSP Stapling\r\n\r\nChanges needed to match the modern level:\r\n* remove cipher AES128-SHA\r\n* remove cipher AES256-SHA\r\n* remove cipher RC4-SHA\r\n* remove cipher DES-CBC3-SHA\r\n* remove cipher RC4-MD5\r\n* remove cipher DES-CBC3-MD5\r\n* disable TLSv1\r\n* disable SSLv3\r\n* disable SSLv2\r\n* consider enabling TLSv1.1\r\n* consider enabling TLSv1.2\r\n* consider enabling OCSP Stapling\r\n```"},"comment":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/comments/121665324","html_url":"https://github.com/isvsecwatch/httpstracker/issues/40#issuecomment-121665324","issue_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/40","id":121665324,"user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"created_at":"2015-07-15T16:13:42Z","updated_at":"2015-07-15T16:13:42Z","body":"A new RC4 attack, NOMORE, was released today; http://www.rc4nomore.com/\r\n\r\nPlease update your systems."}}