<font size=2 face="sans-serif">I've escalated this and will make sure
this gets fixed asap.</font>
<br><font size=2 face="sans-serif"><br>
Wim Fabri<br>
IBM Belgium Integrated Technology Services.<br>
</font>
<br>
<br>
<br>
<br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">Alexander Mayrhofer
<alexander.mayrhofer@nic.at></font>
<br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">"gtld-tech@icann.org"
<gtld-tech@icann.org></font>
<br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">26/06/2015 10:14</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">[gtld-tech]
TMCH: HIGHLY Insecure SSL config / certificates.</font>
<br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">gtld-tech-bounces@icann.org</font>
<br>
<hr noshade>
<br>
<br>
<br><tt><font size=2>All,<br>
<br>
it seems like the TMCH has rolled out a new certificate on the various
marksdb.org interfaces. Besides the fact that the certificate now uses
an intermediate cert that was not delivered with the chain (and hence made
our TLS connect fail initially), we took a look at the general TLS configuration
of the interfaces, and it seems that the TLS configuration is HIGHLY insecure
at the moment:<br>
<br>
</font></tt><a href="https://www.ssllabs.com/ssltest/analyze.html?d=ry.marksdb.org"><tt><font size=2>https://www.ssllabs.com/ssltest/analyze.html?d=ry.marksdb.org</font></tt></a><tt><font size=2>
(see "Protocol Details")<br>
<br>
Could someone from the TMCH indicate whether they are working on fixing
these serious issues? <br>
<br>
Thanks,<br>
Alex<br>
<br>
</font></tt>
<br>
<br><font size=2 face="sans-serif"><br>
<br>
Tenzij hierboven anders aangegeven: / Sauf indication contraire ci-dessus:
/ Unless otherwise stated above:<br>
<br>
International Business Machines of Belgium sprl / bvba<br>
Siège social / Maatschappelijke zetel: Avenue du Bourget 42 Bourgetlaan,
B-1130 Bruxelles/Brussel<br>
N° d'entreprise / Ondernemingsnr: TVA / BTW BE 0405 912 336<br>
RPM Bruxelles / RPR Brussel</font>