We love you Ivan!<p>'Bulletproof SSL and TLS' joins 'The Illustrated Network' and the 'Unix and Linux System Administration Handbook' as the 'if you're going to read one book' book for its topic. Which is a massive achievement.<p>Random question from another HN thread: did a 4096 bit RSA used to be required to get A+?
SSL labs is brilliant and I've thought about 'why do qualys do this, what are they trying to sell.' I mean. You can't do anything meaningful with the data that you couldn't have done with automated scanning.<p>It has definitely made me remember the brand in a fond way, service above profit is something I respect a lot and if they had something I need I would consider them above cheaper competitors.
Ivan Ristic has done a remarkable service to the Internet with SSLLabs and ModSecurity, and he has done so with a fantastically positive attitude all throughout. Thank you Ivan, I'll be curious to see what you come up with next ;)
Haven't even thought about what Qualys does or why they are doing this for free, just went to the site anytime I needed to verify SSL configuration status.<p>Such a fabulous service without asking for anything in return. Such a tremendous contribution in raising the awareness and enabling people to make their configurations more sure.
Aaaah, there is no link to <a href="https://www.qualys.com/" rel="nofollow">https://www.qualys.com/</a> or <a href="https://www.ssllabs.com/" rel="nofollow">https://www.ssllabs.com/</a> anywhere on this blog!
This post made me realize the human effort behind all of these tools that I use and love like SSL Labs but I take for granted. Thank you for your work and to all the other free tool authors that go unrecognized.
I'm also a happy user of SSL Labs and reader of Bulletproof SSL and TLS. One very cool thing about the book is that if you purchase the hard copy (I got it from Amazon, for example), they'll email you epub, PDF, and web versions for free. The web version is perfect for reference at work. And the book gets updates too (<a href="http://blog.ivanristic.com/2015/08/bulletproof-maintenance.html" rel="nofollow">http://blog.ivanristic.com/2015/08/bulletproof-maintenance.h...</a>).<p>Thanks Ivan!
Thank you Ivan. Over the last many years - when it came to SSL/TLS and web security questions - so often I found a solution in one of your blog posts or forum comments. I can't wait to read your book. All the best.