This site is the archived OWASP Foundation Wiki and is no longer accepting Account Requests.
To view the new OWASP Foundation website, please visit https://owasp.org
Projects/O-Saft/Roadmap
From OWASP
- build better map with description for ciphers (prepared in OSaft/Ciphers.pm )
- review the code (technically, note that it is a testing and not a security tool)
- formatting output should be a postprocess; scoring should be a postprocess
- add check for certificate chains
- add proper metric for risks rating
- implement client certificates
- encourage other admins and developers to fix their SSL issues ;-)"
Done
- 08/2016: GUI improved with more modern buttons and better window layout
- 07/2016: some more checks vor new vulnerabilities added
- 04/2015: build simple GUI
- 12/2014: move formatting functionality to o-saft-usr.pm
- 11/2014: implement other protocols (STARTTLS, IMAPS, POPS, ...)
- 09/2014: move description to external file; remove POD
- 05/2014: check target for any possible/existing cipher
