SSL Audit - Top Indonesian Websites

I came across Qualys SSL Labs a few minutes ago while reading through Hacker News. Immediately triggered my interest to question how secure top websites in Indonesia when it comes to their SSL. Urbanesia Since I am at Urbanesia, the first goto is clear. Typed in Urbanesia.com and the initial audit result was needs more work. So the audit results came back as a B. The server didn’t mitigate BEAST attack and that’s the main reason the grade was dropped. After a little digging up, the ciphers were the culprit and to mitigate the problem, nginx needs to be configured like below. ...

June 26, 2013 · Batista Harahap