[jira] [Commented] (INFRA-7587) Check SSL Status on Eris/harm

["Mark Thomas (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/INFRA-7587?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13971938#comment-13971938 ] 

Mark Thomas commented on INFRA-7587:
------------------------------------

issues.a.o is already rated A-. We can't improve that without a switch to httpd 2.4.x.
The other services proxied behind ull (modules.a.o, paste.a.o etc) are also all rated A-

svn.a.o was B and is now also A- (for the same reasons as issues.a.o)

Rainer has improved www.a.o has been from B to A (it runs 2.4.x already). This also addresses tlp.a.o and *.incubator.a.o

The sites proxied by erebus-ssl are limited to B. erebus-ssl needs an upgrade to improve that.

> Check SSL Status on Eris/harm
> -----------------------------
>
>                 Key: INFRA-7587
>                 URL: https://issues.apache.org/jira/browse/INFRA-7587
>             Project: Infrastructure
>          Issue Type: Task
>          Components: HTTP Server, Subversion
>            Reporter: Ross Gardler
>            Assignee: Mark Thomas
>            Priority: Critical
>
> Is this comment on the heartbleed blog something we should take note of?
> You might want to strenghten your servers: https://www.ssllabs.com/ssltest/analyze.html?d=svn.apache.org has a grade B. google has grade A: https://www.ssllabs.com/ssltest/analyze.html?d=google.de
> Posted by Tilman on April 12, 2014 at 01:17 PM UTC # 
> Ross Gardler (@rgardler)
> Senior Technology Evangelist
> Microsoft Open Technologies, Inc.
> A subsidiary of Microsoft Corporation



--
This message was sent by Atlassian JIRA
(v6.2#6252)