Thursday, April 26, 2012

SSL Pulse

SSL Pulse is a cool tool rolled out by the Trustworthy Internet Movement.   Its described in detail in this post: https://www.trustworthyinternet.org/blog/2012/4/25/ssl-pulse-to-make-ssl-more-secure-and-pervasive.html

The idea is a good one; crawl and analyze the quality of TLS implementations across 200K popular web sites, and display the results in useful ways.

You can't fix what you don't measure and you can't understand the scope of a problem if you can't see it clearly.  Kudos to the SSL Labs team for providing this capability.  Global PKI needs help, as discussed previously, and Trustworthy Internet Movement and SSL Labs are providing building blocks to address the problems.

Looking forward to the additional progress TIM will make with their newly announced SSL Implementation and Governance Initiative.

No comments: