[ { "id" : "service", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "offered with h2, http/1.1 (advertised)" } , { "id" : "ALPN_HTTP2", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", "finding" : "not offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS_ciphers", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" } , { "id" : "PFS_ECDHE_curves", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "prime256v1 secp384r1" } , { "id" : "cipher_order", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" } , { "id" : "cipherorder_TLSv1_1", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" } , { "id" : "TLS_extensions", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" } , { "id" : "TLS_session_ticket", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "valid for 10800 seconds only (= 60 days" } , { "id" : "cert_notBefore", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "2018-08-20 20:00" } , { "id" : "cert_notAfter", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "2019-09-21 08:00" } , { "id" : "certs_countServer", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_crlDistributionPoints", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" } , { "id" : "cert_ocspURL", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "http://ocsp.sca1b.amazontrust.com" } , { "id" : "OCSP_stapling", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "cert_mustStapleExtension", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "HTTP_status_code", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "-509920 seconds from localtime" } , { "id" : "HSTS", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "HPKP", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "Apache/2.4.33 (Unix)" } , { "id" : "banner_application", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "security_headers", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "MEDIUM", "finding" : "--" } , { "id" : "banner_reverseproxy", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 d644e7f3f959c262b5d8dffe5d3078b8.cloudfront.net (CloudFront)" } , { "id" : "heartbleed", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", "cwe" : "CWE-119", "finding" : "not vulnerable, no heartbeat extension" } , { "id" : "CCS", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "ticketbleed", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", "cwe" : "CWE-200", "finding" : "not vulnerable" } , { "id" : "ROBOT", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe" : "CWE-203", "finding" : "not vulnerable" } , { "id" : "secure_renego", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "secure_client_renego", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "CRIME_TLS", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "BREACH", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-3587", "cwe" : "CWE-310", "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" } , { "id" : "POODLE_SSL", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "fallback_SCSV", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "finding" : "supported" } , { "id" : "SWEET32", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", "cwe" : "CWE-327", "finding" : "not vulnerable" } , { "id" : "FREAK", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "not vulnerable to DROWN on this host and port" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" } , { "id" : "LOGJAM", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "not vulnerable, no DH EXPORT ciphers," } , { "id" : "LOGJAM-common_primes", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "no DH key with <= TLS 1.2" } , { "id" : "BEAST", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "not vulnerable, no SSL3 or TLS1" } , { "id" : "LUCKY13", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", "cwe" : "CWE-310", "finding" : "potentially vulnerable, uses TLS CBC ciphers" } , { "id" : "RC4", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "cipher_xc030", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xc028", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" } , { "id" : "cipher_xc014", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_x9d", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_x35", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_xc02f", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_xc027", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_xc013", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_x9c", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_x3c", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_x2f", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "clientsimulation-android_422", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-android_442", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_500", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_60", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_70", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_65_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_70_win10", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_59_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_62_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_6_xp", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_7_vista", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win81", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win10", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_win10", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_winphone10", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-opera_17_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-safari_9_ios9", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_9_osx1011", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_10_osx1012", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-apple_ats_9_ios9", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-tor_1709_win7", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_6u45", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_7u25", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java_904", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_101l", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_102e", "ip" : "cloud.r-project.org/52.85.89.116", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "service", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "offered with h2, http/1.1 (advertised)" } , { "id" : "ALPN_HTTP2", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", "finding" : "not offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS_ciphers", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" } , { "id" : "PFS_ECDHE_curves", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "prime256v1 secp384r1" } , { "id" : "cipher_order", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" } , { "id" : "cipherorder_TLSv1_1", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" } , { "id" : "TLS_extensions", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" } , { "id" : "TLS_session_ticket", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "valid for 10800 seconds only (= 60 days" } , { "id" : "cert_notBefore", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "2018-08-20 20:00" } , { "id" : "cert_notAfter", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "2019-09-21 08:00" } , { "id" : "certs_countServer", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_crlDistributionPoints", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" } , { "id" : "cert_ocspURL", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "http://ocsp.sca1b.amazontrust.com" } , { "id" : "OCSP_stapling", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "cert_mustStapleExtension", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "HTTP_status_code", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "-509990 seconds from localtime" } , { "id" : "HSTS", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "HPKP", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "Apache/2.4.33 (Unix)" } , { "id" : "banner_application", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "security_headers", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "MEDIUM", "finding" : "--" } , { "id" : "banner_reverseproxy", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 1d43f56d3213a63608863fd0e49585b9.cloudfront.net (CloudFront)" } , { "id" : "heartbleed", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", "cwe" : "CWE-119", "finding" : "not vulnerable, no heartbeat extension" } , { "id" : "CCS", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "ticketbleed", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", "cwe" : "CWE-200", "finding" : "not vulnerable" } , { "id" : "ROBOT", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe" : "CWE-203", "finding" : "not vulnerable" } , { "id" : "secure_renego", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "secure_client_renego", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "CRIME_TLS", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "BREACH", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-3587", "cwe" : "CWE-310", "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" } , { "id" : "POODLE_SSL", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "fallback_SCSV", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "finding" : "supported" } , { "id" : "SWEET32", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", "cwe" : "CWE-327", "finding" : "not vulnerable" } , { "id" : "FREAK", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "not vulnerable to DROWN on this host and port" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" } , { "id" : "LOGJAM", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "not vulnerable, no DH EXPORT ciphers," } , { "id" : "LOGJAM-common_primes", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "no DH key with <= TLS 1.2" } , { "id" : "BEAST", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "not vulnerable, no SSL3 or TLS1" } , { "id" : "LUCKY13", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", "cwe" : "CWE-310", "finding" : "potentially vulnerable, uses TLS CBC ciphers" } , { "id" : "RC4", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "cipher_xc030", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xc028", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" } , { "id" : "cipher_xc014", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_x9d", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_x35", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_xc02f", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_xc027", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_xc013", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_x9c", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_x3c", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_x2f", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "clientsimulation-android_422", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-android_442", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_500", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_60", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_70", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_65_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_70_win10", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_59_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_62_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_6_xp", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_7_vista", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win81", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win10", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_win10", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_winphone10", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-opera_17_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-safari_9_ios9", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_9_osx1011", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_10_osx1012", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-apple_ats_9_ios9", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-tor_1709_win7", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_6u45", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_7u25", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java_904", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_101l", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_102e", "ip" : "cloud.r-project.org/52.85.89.32", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "service", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "offered with h2, http/1.1 (advertised)" } , { "id" : "ALPN_HTTP2", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", "finding" : "not offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS_ciphers", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" } , { "id" : "PFS_ECDHE_curves", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "prime256v1 secp384r1" } , { "id" : "cipher_order", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" } , { "id" : "cipherorder_TLSv1_1", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" } , { "id" : "TLS_extensions", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'application layer protocol negotiation/#16'" } , { "id" : "TLS_session_ticket", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "valid for 10800 seconds only (= 60 days" } , { "id" : "cert_notBefore", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "2018-08-20 20:00" } , { "id" : "cert_notAfter", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "2019-09-21 08:00" } , { "id" : "certs_countServer", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_crlDistributionPoints", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" } , { "id" : "cert_ocspURL", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "http://ocsp.sca1b.amazontrust.com" } , { "id" : "OCSP_stapling", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "cert_mustStapleExtension", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "HTTP_status_code", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "-510055 seconds from localtime" } , { "id" : "HSTS", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "HPKP", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "Apache/2.4.33 (Unix)" } , { "id" : "banner_application", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "security_headers", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "MEDIUM", "finding" : "--" } , { "id" : "banner_reverseproxy", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 829eee129e6b5002d6c1a37f04888da1.cloudfront.net (CloudFront)" } , { "id" : "heartbleed", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", "cwe" : "CWE-119", "finding" : "not vulnerable, no heartbeat extension" } , { "id" : "CCS", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "ticketbleed", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", "cwe" : "CWE-200", "finding" : "not vulnerable" } , { "id" : "ROBOT", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe" : "CWE-203", "finding" : "not vulnerable" } , { "id" : "secure_renego", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "secure_client_renego", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "CRIME_TLS", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "BREACH", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-3587", "cwe" : "CWE-310", "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" } , { "id" : "POODLE_SSL", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "fallback_SCSV", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "finding" : "supported" } , { "id" : "SWEET32", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", "cwe" : "CWE-327", "finding" : "not vulnerable" } , { "id" : "FREAK", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "not vulnerable to DROWN on this host and port" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" } , { "id" : "LOGJAM", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "not vulnerable, no DH EXPORT ciphers," } , { "id" : "LOGJAM-common_primes", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "no DH key with <= TLS 1.2" } , { "id" : "BEAST", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "not vulnerable, no SSL3 or TLS1" } , { "id" : "LUCKY13", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", "cwe" : "CWE-310", "finding" : "potentially vulnerable, uses TLS CBC ciphers" } , { "id" : "RC4", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "cipher_xc030", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xc028", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" } , { "id" : "cipher_xc014", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_x9d", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_x35", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_xc02f", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_xc027", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_xc013", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_x9c", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_x3c", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_x2f", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "clientsimulation-android_422", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-android_442", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_500", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_60", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_70", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_65_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_70_win10", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_59_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_62_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_6_xp", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_7_vista", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win81", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win10", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_win10", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_winphone10", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-opera_17_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-safari_9_ios9", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_9_osx1011", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_10_osx1012", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-apple_ats_9_ios9", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-tor_1709_win7", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_6u45", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_7u25", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java_904", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_101l", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_102e", "ip" : "cloud.r-project.org/52.85.89.62", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "service", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "HTTP" } , { "id" : "SSLv2", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "SSLv3", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "not offered" } , { "id" : "TLS1", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "not offered" } , { "id" : "TLS1_1", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "offered" } , { "id" : "TLS1_2", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "TLS1_3", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "not offered and downgraded to a weaker protocol" } , { "id" : "NPN", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "offered with h2, http/1.1 (advertised)" } , { "id" : "ALPN_HTTP2", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "h2" } , { "id" : "ALPN", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "http/1.1" } , { "id" : "cipherlist_NULL", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_aNULL", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_EXPORT", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_LOW", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cwe" : "CWE-327", "finding" : "not offered" } , { "id" : "cipherlist_3DES_IDEA", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cwe" : "CWE-310", "finding" : "not offered" } , { "id" : "cipherlist_AVERAGE", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "LOW", "cwe" : "CWE-310", "finding" : "offered" } , { "id" : "cipherlist_STRONG", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "offered" } , { "id" : "PFS_ciphers", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA" } , { "id" : "PFS_ECDHE_curves", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "prime256v1 secp384r1" } , { "id" : "cipher_order", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "server" } , { "id" : "protocol_negotiated", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "Default protocol TLS1.2" } , { "id" : "cipher_negotiated", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)" } , { "id" : "cipherorder_TLSv1_1", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA AES256-SHA AES128-SHA" } , { "id" : "cipherorder_TLSv1_2", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-GCM-SHA384 ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA AES128-SHA" } , { "id" : "TLS_extensions", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "'server name/#0' 'renegotiation info/#65281' 'EC point formats/#11' 'session ticket/#35' 'next protocol/#13172' 'status request/#5' 'application layer protocol negotiation/#16'" } , { "id" : "TLS_session_ticket", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "valid for 10800 seconds only (= 60 days" } , { "id" : "cert_notBefore", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "2018-08-20 20:00" } , { "id" : "cert_notAfter", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "2019-09-21 08:00" } , { "id" : "certs_countServer", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "4" } , { "id" : "certs_list_ordering_problem", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "no" } , { "id" : "cert_crlDistributionPoints", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "http://crl.sca1b.amazontrust.com/sca1b.crl" } , { "id" : "cert_ocspURL", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "http://ocsp.sca1b.amazontrust.com" } , { "id" : "OCSP_stapling", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "cert_mustStapleExtension", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "--" } , { "id" : "DNS_CAArecord", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "LOW", "finding" : "--" } , { "id" : "certificate_transparency", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "yes (certificate extension)" } , { "id" : "HTTP_status_code", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "200 OK ('/')" } , { "id" : "HTTP_clock_skew", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "-510129 seconds from localtime" } , { "id" : "HSTS", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "LOW", "finding" : "not offered" } , { "id" : "HPKP", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No support for HTTP Public Key Pinning" } , { "id" : "banner_server", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "Apache/2.4.33 (Unix)" } , { "id" : "banner_application", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No application banner found" } , { "id" : "cookie_count", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "0 at '/'" } , { "id" : "security_headers", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "MEDIUM", "finding" : "--" } , { "id" : "banner_reverseproxy", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "cwe" : "CWE-200", "finding" : "X-Cache: Hit from cloudfrontVia: 1.1 ec7268fa1110683dbc457e57c2be1475.cloudfront.net (CloudFront)" } , { "id" : "heartbleed", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0160", "cwe" : "CWE-119", "finding" : "not vulnerable, no heartbeat extension" } , { "id" : "CCS", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-0224", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "ticketbleed", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-9244", "cwe" : "CWE-200", "finding" : "not vulnerable" } , { "id" : "ROBOT", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2017-17382 CVE-2017-17427 CVE-2017-17428 CVE-2017-13098 CVE-2017-1000385 CVE-2017-13099 CVE-2016-6883 CVE-2012-5081 CVE-2017-6168", "cwe" : "CWE-203", "finding" : "not vulnerable" } , { "id" : "secure_renego", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "secure_client_renego", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2009-3555", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "CRIME_TLS", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2012-4929", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "BREACH", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-3587", "cwe" : "CWE-310", "finding" : "not vulnerable, no HTTP compression - only supplied '/' tested" } , { "id" : "POODLE_SSL", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2014-3566", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "fallback_SCSV", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "finding" : "supported" } , { "id" : "SWEET32", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-2183 CVE-2016-6329", "cwe" : "CWE-327", "finding" : "not vulnerable" } , { "id" : "FREAK", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-0204", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "not vulnerable to DROWN on this host and port" } , { "id" : "DROWN", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "cve" : "CVE-2016-0800 CVE-2016-0703", "cwe" : "CWE-310", "finding" : "Make sure you don't use this certificate elsewhere with SSLv2 enabled services, see https://censys.io/ipv4?q=42474148A0CBC5AA042D4C99386B5390C95F56A86D997F81524496E952276E06" } , { "id" : "LOGJAM", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "not vulnerable, no DH EXPORT ciphers," } , { "id" : "LOGJAM-common_primes", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2015-4000", "cwe" : "CWE-310", "finding" : "no DH key with <= TLS 1.2" } , { "id" : "BEAST", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2011-3389", "cwe" : "CWE-20", "finding" : "not vulnerable, no SSL3 or TLS1" } , { "id" : "LUCKY13", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "LOW", "cve" : "CVE-2013-0169", "cwe" : "CWE-310", "finding" : "potentially vulnerable, uses TLS CBC ciphers" } , { "id" : "RC4", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "OK", "cve" : "CVE-2013-2566 CVE-2015-2808", "cwe" : "CWE-310", "finding" : "not vulnerable" } , { "id" : "cipher_xc030", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc030 ECDHE-RSA-AES256-GCM-SHA384 ECDH 256 AESGCM 256 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_xc028", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc028 ECDHE-RSA-AES256-SHA384 ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384" } , { "id" : "cipher_xc014", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc014 ECDHE-RSA-AES256-SHA ECDH 256 AES 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_x9d", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "x9d AES256-GCM-SHA384 RSA AESGCM 256 TLS_RSA_WITH_AES_256_GCM_SHA384" } , { "id" : "cipher_x35", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "x35 AES256-SHA RSA AES 256 TLS_RSA_WITH_AES_256_CBC_SHA" } , { "id" : "cipher_xc02f", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc02f ECDHE-RSA-AES128-GCM-SHA256 ECDH 256 AESGCM 128 TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_xc027", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc027 ECDHE-RSA-AES128-SHA256 ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_xc013", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "xc013 ECDHE-RSA-AES128-SHA ECDH 256 AES 128 TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "cipher_x9c", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "x9c AES128-GCM-SHA256 RSA AESGCM 128 TLS_RSA_WITH_AES_128_GCM_SHA256" } , { "id" : "cipher_x3c", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "x3c AES128-SHA256 RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA256" } , { "id" : "cipher_x2f", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "x2f AES128-SHA RSA AES 128 TLS_RSA_WITH_AES_128_CBC_SHA" } , { "id" : "clientsimulation-android_422", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-android_442", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_500", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_60", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-android_70", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_65_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-chrome_70_win10", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_59_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-firefox_62_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-ie_6_xp", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_7_vista", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_8_xp", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-ie_11_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win81", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_winphone81", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-ie_11_win10", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_win10", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_13_winphone10", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-edge_15_win10", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-opera_17_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-SHA256" } , { "id" : "clientsimulation-safari_9_ios9", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_9_osx1011", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-safari_10_osx1012", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-apple_ats_9_ios9", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-tor_1709_win7", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_6u45", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_7u25", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "No connection" } , { "id" : "clientsimulation-java_8u161", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-java_904", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_101l", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "clientsimulation-openssl_102e", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256" } , { "id" : "scanTime", "ip" : "cloud.r-project.org/52.85.89.115", "port" : "443", "severity" : "INFO", "finding" : "277" } ]