This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Projects/O-Saft/Roadmap
From OWASP
- check target for any possible/existing cipher (expected in May 2014)
- review the code (technically, note that it is a testing and not a security tool)
- add check for certificate chains
- add proper metric for risks rating
- implement client certificates
- implement other protocols (STARTTLS, IMAPS, POPS, ...)
- encourage other admins and developers to fix their SSL issues ;-)"
