Why is dash.org redirectiing to www.dash.org? What's the point of blowing 20K on a 4 letter domain and then making it an 8 character domain? Don't you think that "www." is so last decade?
...I should also point out, "dashtalk.org" doesn't bother with a "www."
Since we are on the topic of dash.org, I went ahead and scanned the website using Qualys SSL Lab Server Test. I'm sure it's not a huge deal but we got a C grade. You can see the results in this link here - https://www.ssllabs.com/ssltest/analyze.html?d=dash.org
At least 1. and 2. are VERY easy to fix because they are simple configuration settings.
- This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate.
- This server accepts RC4 cipher, but only with older protocol versions.
- The server does not support Forward Secrecy with the reference browsers.
3. depends on the HTTP-server used.
Pinging DCT
At least 1. and 2. are VERY easy to fix because they are simple configuration settings.
- This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate.
- This server accepts RC4 cipher, but only with older protocol versions.
- The server does not support Forward Secrecy with the reference browsers.
3. depends on the HTTP-server used.
Pinging DCT
SSLProtocol ALL -SSLv2 -SSLv3
SSLCipherSuite EECDH+AESGCM:EDH+AESGCM:AES256+EECDH:AES256+EDH