Your DNSSEC zone is signed. It's also an open book.
DNSSEC with NSEC lets attackers walk your entire zone and enumerate every hostname. NSEC3 fixes this. SSLBoard now tests for it, including across CNAME delegations to third parties.
Read article
DNSSEC with NSEC lets attackers walk your entire zone and enumerate every hostname. NSEC3 fixes this. SSLBoard now tests for it, including across CNAME delegations to third parties.
Read article
Definitions for TLS, SSL, certificates, cipher suites, OCSP, HSTS, CAA, and more. A plain-English reference for understanding SSLBoard reports.
Read article
Post-quantum cryptography is part of TLS hygiene alongside certificate expiry, key length, cipher strength, and protocol versions. Learn how to approach it.
Read article
SSL certificates are critical for security, but tracking them is harder than ever. With billions in use, SSLBoard simplifies SSL monitoring.
Read article
Certificate Transparency helps detect unauthorized SSL/TLS certificates. Learn how SSLBoard leverages CT logs to audit, track, and verify certificates.
Read article