certbot/certbot

485649333422 (11 hours ago) → 485649333422 (2 hours ago)

Measure	Before	After	Change
Findings to address	168	175	+7
Quantum-vulnerable locations	165	180	+15
Quantum-safe locations	7	17	+10
Key establishment	69	83	+14
Files scanned	784	829	+45

Added

Present in the later scan and not in the earlier one.

Finding	Assessment	After
DES TLS cipher suites pinned in configuration · `config.tls-ciphers`	Already broken	1
ECDH TLS cipher suite named in source · `config.cipher-suite`	Quantum-vulnerable	10
DH TLS cipher suite named in source · `config.cipher-suite`	Quantum-vulnerable	1
RSASSA-PKCS1v15 JOSE algorithm declared in configuration · `jose.algorithm`	Quantum-vulnerable	1
HMAC JOSE algorithm declared in configuration · `jose.algorithm`	Quantum-safe	10

Present in the earlier scan and gone in the later one.

Finding	Assessment	Before	After
MD5 TLS cipher suites pinned in configuration · `config.tls-ciphers`	Already broken	6	0

The same finding, in a different number of places.

Finding	Assessment	Before	After
RC4 TLS cipher suites pinned in configuration · `config.tls-ciphers`	Already broken	8	5
TLS TLS cipher suites pinned in configuration · `config.tls-ciphers`	Quantum-vulnerable	8	16
RSA RSA key generated with pyca/cryptography · `py.cryptography.rsa`	Quantum-vulnerable	22	17

33 findings appear in both scans, in the same number of places. Each scan's own report lists them.