Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

headers to ignore the ciphers #21

Closed
pilasguru opened this issue Mar 20, 2018 · 3 comments
Closed

headers to ignore the ciphers #21

pilasguru opened this issue Mar 20, 2018 · 3 comments

Comments

@pilasguru
Copy link

# curl -i https://site
HTTP/1.1 200 OK
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block

passmaked always shows WARNING about need to set these headers … UP TO I configured correct ciphers

In other workds: I had a warning cipher 3DES enabled.. and ALSO the warning for both headers…. but the headers was always there. When I fixed ciphers passmarked also stop showing the headers warnings.

Set the headers to totally ignore the ciphers

@Johanndutoit
Copy link
Contributor

Awesome thanks, sorry for the delay just catching up now after our launch. Looking at how we can handle this going forward to give a better definition of the error as it's not "cannot connect", just "we don't understand your ciphers" it seems

@Johanndutoit
Copy link
Contributor

Changes going in at #22

@Johanndutoit
Copy link
Contributor

Need to update at https://github.com/passmarked/http as well for this specific case

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants