This page cannot be shown here. You can still read it on the original site — the toolbar below keeps your place in the directory.
openssl s_client -connect www.yahoo.com:443 -CAfile /usr/local/etc/openssl/cert.pem You should see verify return:1 for each certificate in the chain. Host header injection Read about it here . curl -i --header "Host: evilsite.com" https://www.yahoo.com Your site is vulnerable if evilsite.com appears in the results. SPF Check if your SPF record is valid. Enter your domain here . DNSSEC Very few…
openssl s_client -connect www.yahoo.com:443 -CAfile /usr/local/etc/openssl/cert.pem
You should see verify return:1 for each certificate in the chain.
curl -i --header "Host: evilsite.com" https://www.yahoo.com
Your site is vulnerable if evilsite.com appears in the results.
Check if your SPF record is valid. Enter your domain here.
Very few sites have this right now.
dig pir.org +dnssec
Comments
Nothing yet. Say the first thing.
Sign in to join the conversation.