Hacker News Reader

We love you Ivan!

'Bulletproof SSL and TLS' joins 'The Illustrated Network' and the 'Unix and Linux System Administration Handbook' as the 'if you're going to read one book' book for its topic. Which is a massive achievement.

Random question from another HN thread: did a 4096 bit RSA used to be required to get A+?

View on HN

Thanks! (No, 4096-bit RSA has never been required for A+.)

It used to be for 4x100 though.

It might still be, but the per-category scores are no longer shown. (You can infer the values from the chart.) There's also a per-report score that is not shown any more either. That's because those scores are not really important; only the letter grade is.

The grading criteria should be tweaked (it's on the todo list still) not to favour "too much" security because that affects site performance. It's not easy having one grading approach for all sites.

Reply on news.ycombinator.com