BLCloud SSL TLS Support Results
- Jonathan Schmale
The results from this test showed: https://www.ssllabs.com/ssltest/analyze.html?d=blcloud.net
Making Changes for Improved Security Ratings
Disable TLS 1.0 and 1.1
Using a Powershell command or Registry editing:
Enable strong authentication for .NET applications:
Using a Powershell script:
Manage SSL/TLS protocols and cipher suites for AD FS
2024-01-16
Overall Rating
A
This site works only in browsers with SNI support.
This server supports TLS 1.3.
Chain Issues: None
Common names: *.blcloud.net
Alternative names: *.blcloud.net blcloud.net
Protocols |
|
|---|---|
TLS 1.3 | Yes |
TLS 1.2 | Yes |
TLS 1.1 | No |
TLS 1.0 | No |
SSL 3 | No |
SSL 2 | No |
Cipher Suites
TLS 1.3 (suites in server-preferred order)
TLS_AES_256_GCM_SHA384 (0x1302) ECDH secp384r1 (eq. 7680 bits RSA) FS |
| 256 |
TLS_AES_128_GCM_SHA256 ( |
| 128 |
TLS 1.2 (suites in server-preferred order)
TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH secp384r1 (eq. 7680 bits RSA) FS |
| 256 |
TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 ( |
| 128 |
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ( |
| 256 |
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 ( |
| 128 |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 (0xc028) ECDH secp384r1 (eq. 7680 bits RSA) FS | WEAK | 256 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ( | WEAK | 128 |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ( | WEAK | 256 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_GCM_SHA384 ( | WEAK | 256 |
TLS_RSA_WITH_AES_128_GCM_SHA256 ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_CBC_SHA256 ( | WEAK | 256 |
TLS_RSA_WITH_AES_128_CBC_SHA256 ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_CBC_SHA (0x35) | WEAK | 256 |
TLS_RSA_WITH_AES_128_CBC_SHA ( | WEAK | 128 |
TLS_RSA_WITH_3DES_EDE_CBC_SHA (0xa) | WEAK | 112 |
2022-10-12
Overall Rating
Protocols |
|
|---|---|
TLS 1.3 | No |
TLS 1.2 | Yes |
TLS 1.1 | Yes |
TLS 1.0 | Yes |
SSL 3.0 | No |
SSL 2.0 | No |
Cipher Suites
TLS 1.2 (suites in server-preferred order)
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ( | WEAK | 256 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256 ( | WEAK | 128 |
TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA ( | WEAK | 256 |
TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA ( | WEAK | 128 |
TLS_DHE_RSA_WITH_AES_256_GCM_SHA384 ( | WEAK | 256 |
TLS_DHE_RSA_WITH_AES_128_GCM_SHA256 ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_GCM_SHA384 ( | WEAK | 256 |
TLS_RSA_WITH_AES_128_GCM_SHA256 ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_CBC_SHA256 ( | WEAK | 256 |
TLS_RSA_WITH_AES_128_CBC_SHA256 ( | WEAK | 128 |
TLS_RSA_WITH_AES_256_CBC_SHA ( | WEAK | 256 |
TLS_RSA_WITH_AES_128_CBC_SHA ( | WEAK | 128 |
TLS_RSA_WITH_3DES_EDE_CBC_SHA ( | WEAK | 112 |
TLS_RSA_WITH_RC4_128_SHA ( | INSECURE | 128 |
TLS_RSA_WITH_RC4_128_MD5 ( | INSECURE | 128 |