{"action":"created","issue":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5","labels_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/comments","events_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5/events","html_url":"https://github.com/isvsecwatch/httpstracker/issues/5","id":60208704,"number":5,"title":"interface.cloudvps.com - admin interface for cloud provider","user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Client-Side%20Cipher%20Ordering","name":"Client-Side Cipher Ordering","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/DH%201024-bit","name":"DH 1024-bit","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/MD5","name":"MD5","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20Forward%20Secrecy","name":"No Forward Secrecy","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/No%20HSTS","name":"No HSTS","color":"207de5"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4","name":"RC4","color":"eb6420"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/RC4%20Preferred","name":"RC4 Preferred","color":"e11d21"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/TLSv1%20Only","name":"TLSv1 Only","color":"fbca04"},{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/labels/Weak","name":"Weak","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":8,"created_at":"2015-03-07T14:37:38Z","updated_at":"2015-04-24T20:53:44Z","closed_at":null,"body":"**SSL Server Test Results**\r\nhttps://www.ssllabs.com/ssltest/analyze.html?d=interface.cloudvps.com\r\n\r\n**Cipherscan Results**\r\n```\r\nTarget: interface.cloudvps.com:443\r\n\r\nprio  ciphersuite           protocols  pfs_keysize\r\n1     DHE-RSA-AES256-SHA    TLSv1      DH,1024bits\r\n2     AES256-SHA            TLSv1\r\n3     DHE-RSA-AES128-SHA    TLSv1      DH,1024bits\r\n4     AES128-SHA            TLSv1\r\n5     RC4-SHA               TLSv1\r\n6     RC4-MD5               TLSv1\r\n7     EDH-RSA-DES-CBC3-SHA  TLSv1      DH,1024bits\r\n8     DES-CBC3-SHA          TLSv1\r\n\r\nCertificate: trusted, 2048 bit, sha256WithRSAEncryption signature\r\nTLS ticket lifetime hint: None\r\nOCSP stapling: not supported\r\nClient side cipher ordering\r\n```\r\n**Verdict**\r\nRC4 still on, no Forward Secrecy, 1024-bit DH keys, etc. This is the admin interface for a Dutch cloud provider, CloudVPS. It is the primary control interface for any virtual machines hosted with them, and should therefore do much better than this. They have been warned about this several times over the past year, and have yet to up their game."},"comment":{"url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/comments/96062293","html_url":"https://github.com/isvsecwatch/httpstracker/issues/5#issuecomment-96062293","issue_url":"https://api.github.com/repos/isvsecwatch/httpstracker/issues/5","id":96062293,"user":{"login":"sindarina","id":6074566,"avatar_url":"https://avatars.githubusercontent.com/u/6074566?v=3","gravatar_id":"","url":"https://api.github.com/users/sindarina","html_url":"https://github.com/sindarina","followers_url":"https://api.github.com/users/sindarina/followers","following_url":"https://api.github.com/users/sindarina/following{/other_user}","gists_url":"https://api.github.com/users/sindarina/gists{/gist_id}","starred_url":"https://api.github.com/users/sindarina/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sindarina/subscriptions","organizations_url":"https://api.github.com/users/sindarina/orgs","repos_url":"https://api.github.com/users/sindarina/repos","events_url":"https://api.github.com/users/sindarina/events{/privacy}","received_events_url":"https://api.github.com/users/sindarina/received_events","type":"User","site_admin":false},"created_at":"2015-04-24T20:53:44Z","updated_at":"2015-04-24T20:53:44Z","body":"No change."}}