More insecure https samples (batch #2)

SSL Test executed on July 5 2015.

[batch #1 video]
[2 parts post about sigmamedia.net/badssl]



OrganisationURL
US Department of Homeland Security, Electronic System for Travel Authorizationhttp://www.dhs.gov/
US Custom and Border Protection (likely API endpoint for online payments)http://www.cbp.gov/
Arkansas Judiciary portalhttps://courts.arkansas.gov
Virginia Department of Motor Vehicleshttps://www.dmv.virginia.gov
Oklahoma State Treasure Officehttp://www.treasurer.ok.gov
US Consumer Financial Protection Bureauhttps://www.consumerfinance.gov
US Payment system used by various state and local agencieshttps://certifiedpayments.net/
US Govt. Malware Submission Formhttps://malware.us-cert.gov
French State Department Cooperation portalhttp://www.interieur.gouv.fr/
Italian National Security Information Systemhttps://sicurezzanazionale.gov.it/
Dutch Department of Infrastructure and Environmenthttp://www.rijksoverheid.nl/ministeries/ienm
Portoguese Secure Authentication Service for access to public services onlinehttps://autenticacao.gov.pt
Portoguese Health Data Platformhttps://servicos.min-saude.pt
Peruvian Department of Defensehttp://www.mindef.gob.pe/
US Military Webmailhttps://web-cols01.mail.mil
US Department of Defense Identity Managementhttps://www.dmdc.osd.mil/
Civil and Defense Aerospace Industryhttp://www.boeing.com
European Space Agencyhttp://www.esa.int
Juniper Networkshttps://emea-access.juniper.net
Bharat Sanchar Nigam Ltd. is the world's seventh largest telecommunications companyhttp://www.bsnlcloud.com/
Global ICT solutions provider with 15,000 employees and offices in 51 countrieshttp://opsourcecloud.net
LoginWall mission is to improve Web security and increase online safetyhttp://www.loginwall.com/
Network, IT security and monitoringhttp://securityadvisor.eu
Spanish postal servicehttps://www.correos.es
Jobs database (Alexa #99, Heartbleed on July 2015)http://www.jobsdb.com/
Italian Telecom companyhttp://www.wind.it
Market-leading credit management company in Europehttps://www.intrum.com/
Online Payments companyhttps://securepay.com.au
Dutch bankhttps://www.rabobank.nl/
US bankhttp://citigroup.com
US Investments companyhttps://guggenheiminvestments.com
UK based Global Insurancehttps://www.lloyds.com/
German Automotivehttps://www.mercedes-benz.de
Groningen University Medical Centerhttps://www.umcg.nl
Historical italian networkhttp://www.mclink.it/
UNICEF Italy, donations pagehttps://donazioni.unicef.it
Tyres industryhttp://www.goodyear.com/
University of California, Los Angeleshttp://www.ucla.edu/

Comments

Post a Comment

Popular posts from this blog

Due minuti e mezzo per mezzanotte

Image
Venerdi scorso, 27 Gennaio 2017, il Bulletin of the Atomic Scientists ha annunciato lo spostamento in avanti di 30 secondi del Doomsday Clock . Mancano 2 minuti e mezzo per mezzanotte. Quella che segue è una traduzione del testo integrale . Bollettino  degli Scienziati  Atomici Mancano due minuti e mezzo per mezzanotte Comunicato dal Doomsday Clock * 2017 Comitato per la Scienza e Sicurezza Bollettino degli Scienziati Atomici Direttore Responsabile, John Mecklin (*) Doomsday Clock: un orologio metaforico che indica quanto la civiltà sia vicina ad una possibile fine del mondo, pubblicato  negli ultimi settant’anni  con il bollettino annuale degli Scienziati Atomici; tra i membri, quindici premi Nobel. IT IS TWO AND A HALF MINUTES TO MIDNIGHT© Premessa del direttore  Quest’anno segna il 70mo anniversario del Doomsday Clock , una rappresentazione grafica apparsa sulla prima copertina del Bollettino degli Scienziati At...
Read more

SSLLabs SSL Test on 716 .gov https sites

Image
716 .gov https sites (thanks to @hackertarget dnsdumpster) 328 " F " (45,81%) 178 " A " (24,86%) (one IP address per subdomain unless multiple scores) 2016/03/02 18:12:18 a068-acswebsrv.nyc.gov 167.153.11.46: F 2016/03/02 18:12:29 ace.cbp.dhs.gov 216.81.83.93: F 2016/03/02 18:12:29 accela1.howardcountymd.gov 167.102.191.83: F 2016/03/02 18:12:35 1click.dhsoha.oregon.gov 170.104.63.76: A- 2016/03/02 18:12:38 adfs.txdot.gov 168.58.229.156: C 2016/03/02 18:12:42 adfg.alaska.gov 146.63.61.200: C 2016/03/02 18:12:52 aip.medi-cal.ca.gov 12.9.80.162: F 2016/03/02 18:13:02 ac.ninds.nih.gov 156.40.215.10: A 2016/03/02 18:13:06 adhimmreglive.arkansas.gov 170.94.17.67: A 2016/03/02 18:13:09 adherave.arkansas.gov 170.94.15.181: B 2016/03/02 18:13:24 alerts.rochestermn.gov 12.184.36.207: A 2016/03/02 18:13:24 airmobile.house.gov 143.228.131.184: F 2016/03/02 18:13:32 aoprals.state.gov 169.253.204.152: B 2016/03/02 18...
Read more

Het is moeilijk mensen te vertrouwen in een monetair systeem

Image
Aan de Raad voor Accreditatie Is het erger dat een webwinkel met een " F " score op SSL Labs ( geen veiligheid van de verbinding tussen consument en webwinkel) een keuring toont van een Webshop Keurmerk of dat deze Keurmerk "een 10 heeft gekregen voor de betrouwbaarheid door de Raad voor Accreditatie " met name over "de manier waarop de keurmerk wordt verleend"? De webwinkel www.destofzuigerzak.nl is een van de vele online winkels van Nederland. Het menu  Informatie , hoofdstuk  Veilig winkelen  verklaart: "U kunt bij ons met een gerust hart winkelen. Wij zijn gecertificeerd door Webshop Keurmerk, hét toonaangevende door de overheid erkende keurmerk voor kopen op afstand . Daarnaast worden uw gegevens vertrouwelijk behandeld (zie ons Privacy beleid) en worden alle gegevens die u tijdens uw bestelling invoert, versleuteld/beveiligd verstuurd middels een SSL-verbinding . Wij zijn hiervoor officieel gecertificeerd door Safe2Shop met...
Read more