Hacker News new | ask | show | jobs
by stevekemp 4193 days ago
Good answers, thanks.

The obvious omission was the lack of reply about IPv6 support. Do your guests get IPv6 access by default, or can it be added if not?

PS. You might want to update your SSL configuration to avoid the POODLE-attack, and add perfect forward secrecy too.
2 comments
philgourley 4193 days ago
Steve - Thanks for bringing the SSL configuration improvements to our attention. While we aren't open about offering bug bounties. If you could send me an email to team@mediapig.co.uk we'll arrange something for you as thanks.

We're now operating under Grade A SSL on all our applicable domains which includes POODLE-attack protection and perfect forward secrecy.

https://www.ssllabs.com/ssltest/analyze.html?d=mediapig.co.u...

link
stevekemp 4193 days ago
I've dropped you a mail, thanks.
link
philgourley 4193 days ago
Sorry Steve, I missed out the detail on this. At the minute we have not implemented IPv6. All of our kit is IPv6 ready and we are looking to go ahead with this very soon! Thanks again!
link