{"action":"created","issue":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/611","repository_url":"https://api.github.com/repos/mail-in-a-box/mailinabox","labels_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/611/labels{/name}","comments_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/611/comments","events_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/611/events","html_url":"https://github.com/mail-in-a-box/mailinabox/issues/611","id":119286748,"number":611,"title":"Chiper / SSLv3 - Compare with some ISPs","user":{"login":"aspdye","id":12893462,"avatar_url":"https://avatars.githubusercontent.com/u/12893462?v=3","gravatar_id":"","url":"https://api.github.com/users/aspdye","html_url":"https://github.com/aspdye","followers_url":"https://api.github.com/users/aspdye/followers","following_url":"https://api.github.com/users/aspdye/following{/other_user}","gists_url":"https://api.github.com/users/aspdye/gists{/gist_id}","starred_url":"https://api.github.com/users/aspdye/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aspdye/subscriptions","organizations_url":"https://api.github.com/users/aspdye/orgs","repos_url":"https://api.github.com/users/aspdye/repos","events_url":"https://api.github.com/users/aspdye/events{/privacy}","received_events_url":"https://api.github.com/users/aspdye/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/labels/security","name":"security","color":"eb6420"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":16,"created_at":"2015-11-28T11:16:45Z","updated_at":"2016-05-19T16:13:25Z","closed_at":null,"body":"Hi there,\r\n\r\nI used \"ssl-tools.net\" for getting this information ;) This is the Report of an Mail-in-a-Box Setup (occams.info of @JoshData):\r\n\r\n![occams info](https://cloud.githubusercontent.com/assets/12893462/11451517/3b2c9468-95c9-11e5-8952-1110d50de064.PNG)\r\n\r\nSSL Tools has detected 2 main problems: SSLv3 and the weak chiper-suite. SSLv3 isn't a (big) problem for now. Everybody uses it. (except the guys of Mailbox.org) But nobody is using the weak chiper-suite (not even the providers who have no DANE :smile:). So why are we proving this with MiaB?\r\n\r\n![1and1](https://cloud.githubusercontent.com/assets/12893462/11451534/a4880a3c-95c9-11e5-8ceb-8e4c26e04a8c.PNG)\r\n(1&1) - No bad Chiper-Suite. No DANE TLS. SSLv3 supported.\r\n\r\n![posteo](https://cloud.githubusercontent.com/assets/12893462/11451537/ae887148-95c9-11e5-8100-5c3d97e7fa82.PNG)\r\n(Posteo) - No bad Chiper-Suite. SSLv3 supported.\r\n\r\n![mailbox](https://cloud.githubusercontent.com/assets/12893462/11451538/b41cee0e-95c9-11e5-9859-c0d6f769ddcc.PNG)\r\n(Mailbox.org) - Strict! No SSLv3 and no bad Chiper-Suite.\r\n\r\nConclusion: I think we should remove the \"bad\" Chiper-Suite ;) What do you think?\r\n\r\n\r\n\r\n\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/comments/220374615","html_url":"https://github.com/mail-in-a-box/mailinabox/issues/611#issuecomment-220374615","issue_url":"https://api.github.com/repos/mail-in-a-box/mailinabox/issues/611","id":220374615,"user":{"login":"JoshData","id":445875,"avatar_url":"https://avatars.githubusercontent.com/u/445875?v=3","gravatar_id":"","url":"https://api.github.com/users/JoshData","html_url":"https://github.com/JoshData","followers_url":"https://api.github.com/users/JoshData/followers","following_url":"https://api.github.com/users/JoshData/following{/other_user}","gists_url":"https://api.github.com/users/JoshData/gists{/gist_id}","starred_url":"https://api.github.com/users/JoshData/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JoshData/subscriptions","organizations_url":"https://api.github.com/users/JoshData/orgs","repos_url":"https://api.github.com/users/JoshData/repos","events_url":"https://api.github.com/users/JoshData/events{/privacy}","received_events_url":"https://api.github.com/users/JoshData/received_events","type":"User","site_admin":false},"created_at":"2016-05-19T16:13:25Z","updated_at":"2016-05-19T16:13:25Z","body":"https://discourse.mailinabox.email/t/unsecure-ciphers/1256"}}