ownCloud · Report #84078
*.owncloud.com / *.owncloud.org: Using not strong enough SSL ciphers
Summary
We have received multiple reports that some of our domains on *.owncloud.com and *.owncloud.org are not using a recommended configuration for HTTPS purposes. To avoid having multiple issues to track SSL / TLS related problems on *.owncloud.com and *.owncloud.org we have merged multiple issues together in this one.
Meanwhile, we have changed all critical customer facing systems to a secure configuration. It shall be noted that ownCloud is continuously working on their systems and once we have updated some older operating systems we will be able to increase the configuration even more.
- apps.owncloud.com: A
- customer.owncloud.com: C
- presales.owncloud.com: C
- s3.owncloud.com: A
- download.owncloud.com: B
- owncloud.com: B
- doc.owncloud.com: B
- owncloud.org: B
- doc.owncloud.org: B
- owncloud.help: A+
In case of different issues we'd like to ask to open a new issue. We'll however not consider any of the above listed items as issue.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.