{"action":"closed","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/8","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/8/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/8/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/8/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/8","id":60211105,"number":8,"title":"myproducts.drobo.com - login site for hardware vendor","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Bad%20Cipher%20Ordering","name":"Bad Cipher Ordering","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Closed%20(Unresolved)","name":"Closed (Unresolved)","color":"0052cc"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Lacks%20Robust%20PFS","name":"Lacks Robust PFS","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/MD5","name":"MD5","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20ECDHE","name":"No ECDHE","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4%20Preferred","name":"RC4 Preferred","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":9,"created_at":"2015-03-07T15:39:42Z","updated_at":"2015-05-02T14:44:50Z","closed_at":"2015-05-02T14:44:50Z","body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=myproducts.drobo.com (B)\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: myproducts.drobo.com:443\r\n\r\nprio  ciphersuite                protocols              pfs_keysize\r\n1     RC4-SHA                    TLSv1,TLSv1.1,TLSv1.2\r\n2     RC4-MD5                    TLSv1,TLSv1.1,TLSv1.2\r\n3     DHE-RSA-AES256-GCM-SHA384  TLSv1.2                DH,2048bits\r\n4     DHE-RSA-AES256-SHA256      TLSv1.2                DH,2048bits\r\n5     DHE-RSA-AES256-SHA         TLSv1,TLSv1.1,TLSv1.2  DH,2048bits\r\n6     DHE-RSA-CAMELLIA256-SHA    TLSv1,TLSv1.1,TLSv1.2  DH,2048bits\r\n7     AES256-GCM-SHA384          TLSv1.2\r\n8     AES256-SHA256              TLSv1.2\r\n9     AES256-SHA                 TLSv1,TLSv1.1,TLSv1.2\r\n10    CAMELLIA256-SHA            TLSv1,TLSv1.1,TLSv1.2\r\n11    DHE-RSA-AES128-GCM-SHA256  TLSv1.2                DH,2048bits\r\n12    DHE-RSA-AES128-SHA256      TLSv1.2                DH,2048bits\r\n13    DHE-RSA-AES128-SHA         TLSv1,TLSv1.1,TLSv1.2  DH,2048bits\r\n14    DHE-RSA-CAMELLIA128-SHA    TLSv1,TLSv1.1,TLSv1.2  DH,2048bits\r\n15    EDH-RSA-DES-CBC3-SHA       TLSv1,TLSv1.1,TLSv1.2  DH,2048bits\r\n16    AES128-GCM-SHA256          TLSv1.2\r\n17    AES128-SHA256              TLSv1.2\r\n18    AES128-SHA                 TLSv1,TLSv1.1,TLSv1.2\r\n19    CAMELLIA128-SHA            TLSv1,TLSv1.1,TLSv1.2\r\n20    DES-CBC3-SHA               TLSv1,TLSv1.1,TLSv1.2\r\n\r\nCertificate: trusted, 2048 bit, sha256WithRSAEncryption signature\r\nTLS ticket lifetime hint: 300\r\nOCSP stapling: not supported\r\nServer side cipher ordering\r\n```\r\n**Verdict**\r\nBad cipher ordering, RC4 preferred, no ECDHE ciphers despite support for TLSv1.2; not as big a mess as others, but definitely needs some work."}}