SSLLabs security reports for some embarcadero subdomains
Posted by jpluimers on 2018/01/09
I hope this is a coincidence. Before Nick Hodges left, the TLS security of the various embarcadero https servers was increased, most from grade F. Now they might soon be grade F again.
Hopefully somebody in IT has time to take a renewed look as security needs constant attention.
- “This server is vulnerable to the Return Of Bleichenbacher’s Oracle Threat (ROBOT) vulnerability. Grade will be set to F from February 2018.”
- “This server uses 64-bit block cipher (3DES / DES / RC2 / IDEA) with modern protocols. Grade capped to C. MORE INFO »“
I’ve only included a fraction of their sub-domains, as really this is a job for the Embarcadero IT department.
Related:
- Oh nice: the compiler settings in your .dproj files are not reflected in what Ctrl-O O emits in XE7
- Positive: Delphi 10.1 Berlin is out; negative all Embarcadero HTTPS sites still vulnerable to DROWN attack
- RAD Studio 10 next stop: Berlin (via: The inheritance tree of all Fire Monkey objects) but would you really trust it?
- New Delphi product version: will it be Seattle or 10? It might be both! radstudiodemos/code/…/branches now has RADStudio_Seattle branch, docwiki URLs with Seattle exists and nice YouTube preview image!
The Wiert Corner - irregular stream of stuff 
Leave a comment