Hacker News new | ask | show | jobs
by dhbx9 3293 days ago
Is there a similar tool that tests HTTPS enabled web servers on their choice of ciphers etc?
4 comments

Or https://testssl.sh/ if you don't want to rely on a third-party.
https://observatory.mozilla.org/ is a great all-in-one tool that does SSL, headers, and a bunch of other stuff - calls out to ssllabs among others.
I've actually been building a tool that does just this during the current YC Startup School program.

You can get on the launch list here: https://watchdog443.com

My main focus is ongoing alerting of changes to HTTPS configs rather than just a one off check. So you can be confident that everything is up to your spec or know as soon as something isn't.

Because we'll know your setup we can also alert you to things you specifically should be aware of - for instance a browser policy change that would affect user experience due to your certificates not meeting the browser policy etc.

Feel free to mail me if you'd like more info! (email in profile.)

(PS. YC Startup School's virtual demo day is tomorrow if you're interested! All the startups that completed the course are posting a short demo video.)

https://sslping.com even monitors your configuration every day for free
What a wonderful little site. Thanks for the link!
Thank you! (my site)... SSLPing didn't get as much attention on HN as SSHCheck does...
Well then let me thank you again :) Very slick UI, signed up in seconds, set myself up in under a minute.

What are your plans with it? Just leaving a free service running or do you want to add paid plans as well? (and if not, I would recommend setting up at least a "Support" plan of some kind; it sends a strong signal)

Thanks again :)

I have no set plan yet (the site is 1yr old)... SSLPing monitors almost 6000 servers daily, 250+ users... so maybe I'll follow your advice with some kind of support plan (I was thinking of donations)

> I was thinking of donations

Common piece of feedback I have seen in many donation-driven software projects:

Don't do donations. Do a support plan; even one as basic as "priority replies to emails". If a company wants to use your product, even if they want to pay, it's very hard to justify a donation whereas a support plan is far more readily bought.