SSL Report: readinglist.services.mozilla.com

[pdehaan]

Results from https://www.ssllabs.com/ssltest/analyze.html?d=readinglist.services.mozilla.com&hideResults=on

---

PDFs:

1. SSL Server Test/ readinglist.services.mozilla.com (Powered by Qualys SSL Labs).pdf
2. SSL Server Test/ readinglist.services.mozilla.com (Powered by Qualys SSL Labs)(2).pdf

The one result that jumped out at me was:

Protocol Details
Secure Client-Initiated Renegotiation	Supported DoS DANGER (more info)

[almet]

@Micheletto @deanwilson do you have thoughts about that?

[Micheletto]

An A is pretty good. But, we're going to switch to the default AWS policies, provided we don't need to support any intermediate clients. Which should be the case for us.

[pdehaan]

Feel free to close this if there isn't anything actionable or interesting about it anymore.

[Micheletto]

I switched stage over to the latest AWS contained policy. An SSL scan, however, shows that did not resolve the problem.