{"action":"created","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/9","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/9/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/9/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/9","id":60225732,"number":9,"title":"hypefortype.com - store/login site","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/DH%201024-bit","name":"DH 1024-bit","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/SHA1%20Certificate","name":"SHA1 Certificate","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2015-03-07T21:37:41Z","updated_at":"2015-05-16T06:18:23Z","closed_at":null,"body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=hypefortype.com (B)\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: hypefortype.com:443\r\n\r\nprio  ciphersuite        protocols                    pfs_keysize\r\n1     RC4-SHA            SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n2     AES256-GCM-SHA384  TLSv1.2\r\n3     AES256-SHA256      TLSv1.2\r\n4     AES256-SHA         SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n5     CAMELLIA256-SHA    SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n6     AES128-GCM-SHA256  TLSv1.2\r\n7     AES128-SHA256      TLSv1.2\r\n8     AES128-SHA         SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n9     CAMELLIA128-SHA    SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n10    DES-CBC3-SHA       SSLv3,TLSv1,TLSv1.1,TLSv1.2\r\n\r\nCertificate: trusted, 2048 bit, sha1WithRSAEncryption signature\r\nTLS ticket lifetime hint: 300\r\nOCSP stapling: not supported\r\nServer side cipher ordering\r\n```\r\n**Verdict**\r\nSSLv3 still on, RC4 preferred over everything else, SHA1 certificate, no Forward Secrecy whatsoever. They're actually using the one remaining 1024-bit root in the Mozilla store. Needs work!"},"comment":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/comments/102576532","html_url":"https://github.com/isvsecwatch/httpstracker/issues/9#issuecomment-102576532","issue_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/9","id":102576532,"user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"created_at":"2015-05-16T06:18:23Z","updated_at":"2015-05-16T06:18:23Z","body":"No change."}}