News for hackers. Stuff that matters.
Re:SSH Check – public SSH server testing tool by dhbx9 on Thursday June 15, 2017 @06:09AM (#14559088)
Is there a similar tool that tests HTTPS enabled web servers on their choice of ciphers etc?
Re:SSH Check – public SSH server testing tool by Maakuth on Thursday June 15, 2017 @06:15AM (#14559106)
Re:SSH Check – public SSH server testing tool by l-p on Thursday June 15, 2017 @06:41AM (#14559199)
Or https://testssl.sh/ if you don't want to rely on a third-party.
Re:SSH Check – public SSH server testing tool by AdamGibbins on Thursday June 15, 2017 @06:29AM (#14559166)
https://observatory.mozilla.org/ is a great all-in-one tool that does SSL, headers, and a bunch of other stuff - calls out to ssllabs among others.
Re:SSH Check – public SSH server testing tool by bimmer44 on Thursday June 15, 2017 @07:37AM (#14559387)
I've actually been building a tool that does just this during the current YC Startup School program.

You can get on the launch list here: https://watchdog443.com

My main focus is ongoing alerting of changes to HTTPS configs rather than just a one off check. So you can be confident that everything is up to your spec or know as soon as something isn't.

Because we'll know your setup we can also alert you to things you specifically should be aware of - for instance a browser policy change that would affect user experience due to your certificates not meeting the browser policy etc.

Feel free to mail me if you'd like more info! (email in profile.)

(PS. YC Startup School's virtual demo day is tomorrow if you're interested! All the startups that completed the course are posting a short demo video.)

Re:SSH Check – public SSH server testing tool by weddpros on Thursday June 15, 2017 @07:08AM (#14559287)
https://sslping.com even monitors your configuration every day for free
Re:SSH Check – public SSH server testing tool by scrollaway on Thursday June 15, 2017 @08:08AM (#14559608)
What a wonderful little site. Thanks for the link!
Re:SSH Check – public SSH server testing tool by weddpros on Thursday June 15, 2017 @08:52AM (#14559889)
Thank you! (my site)... SSLPing didn't get as much attention on HN as SSHCheck does...
Re:SSH Check – public SSH server testing tool by scrollaway on Thursday June 15, 2017 @09:41AM (#14560237)
Well then let me thank you again :) Very slick UI, signed up in seconds, set myself up in under a minute.

What are your plans with it? Just leaving a free service running or do you want to add paid plans as well? (and if not, I would recommend setting up at least a "Support" plan of some kind; it sends a strong signal)

Re:SSH Check – public SSH server testing tool by weddpros on Thursday June 15, 2017 @10:17AM (#14560593)
Thanks again :)

I have no set plan yet (the site is 1yr old)... SSLPing monitors almost 6000 servers daily, 250+ users... so maybe I'll follow your advice with some kind of support plan (I was thinking of donations)

Re:SSH Check – public SSH server testing tool by scrollaway on Thursday June 15, 2017 @10:44AM (#14560841)
> I was thinking of donations

Common piece of feedback I have seen in many donation-driven software projects:

Don't do donations. Do a support plan; even one as basic as "priority replies to emails". If a company wants to use your product, even if they want to pay, it's very hard to justify a donation whereas a support plan is far more readily bought.