Smart HTTPS VS Qualys SSL Server Test

• Automatic Redirection to HTTPS
  Smart HTTPS automatically changes HTTP protocol to HTTPS, which enhances the security of your browsing by ensuring that the connection is encrypted.
• Fallback to HTTP
  In cases where an HTTPS version of the site is not available, it can automatically revert back to HTTP, ensuring you can still access the website instead of facing a disruption.
• Whitelist Feature
  Allows users to maintain a whitelist of websites that should always be accessed using HTTP, providing flexibility and control over the browsing experience.
• Improved Privacy
  By automatically using HTTPS, it helps in protecting user data from eavesdroppers and enhances privacy while browsing the web.

Possible disadvantages

• Compatibility Issues
  Some websites may not function correctly over HTTPS, leading to potential misbehavior or broken features when accessed using Smart HTTPS.
• Potential for Increased Loading Times
  Sometimes, redirecting to HTTPS can result in slightly longer loading times, especially if the server's configuration is not optimal for HTTPS.
• Resource Intensive
  The addon might consume additional resources to check for HTTPS versions of every site, which could impact browser performance, especially on older systems.
• Limited Control Over Redirection
  Users might have limited ability to control which sites are redirected to HTTPS if they haven't preemptively whitelisted specific HTTP sites.

• Comprehensive Analysis
  The SSL Server Test provides a detailed analysis of the SSL/TLS configuration, including protocol support, key exchange, and cipher strength, helping users identify potential weaknesses.
• Free Tool
  Qualys offers this tool free of charge, making it accessible to anyone interested in evaluating their server's SSL/TLS security without incurring costs.
• User-Friendly Interface
  The tool features a straightforward and intuitive web interface, allowing users of varying technical expertise to perform a server test easily.
• Grading System
  It provides an easy-to-understand grading system (A+ to F), which helps users quickly assess the overall security of their SSL/TLS configuration.
• Regular Updates
  Qualys continuously updates the test to incorporate the latest security standards and vulnerabilities, ensuring the tool remains relevant in the ever-evolving SSL/TLS landscape.

Possible disadvantages

• Public Results
  Test results are publicly accessible, which might be a concern for those who prefer confidentiality regarding their server's security status.
• No Real-Time Monitoring
  The tool is designed for on-demand testing and does not provide continuous monitoring or automated alerts for changes in SSL/TLS security status.
• Limited Scope
  While comprehensive in analyzing SSL/TLS configurations, the tool does not cover other aspects of web server security, such as application vulnerabilities or network configurations.
• Load Implications
  Running the test can occasionally place a load on the server being analyzed, which might affect server performance during the test period.

• “We don’t track you … except for when we get paid for it.”

  Smart HTTPS, site This tries to send you to https sites instead of http sites. Using http sites makes you venerable to man in the middle attacks. (dont use http on public wifis if possible). Source: over 4 years ago

• question about non secure websites

  I'd recommend using Smart HTTPS which automatically makes your site's HTTPS if it can offer it so it will reduce these situations. Here's the site where you can choose whichever browser you use. https://mybrowseraddon.com/smart-https.html. Source: over 4 years ago

• Unable to have valid chain of authority

  Check it at https://ssllabs.com/ssltest and it will tell you what’s wrong with the chain. Source: over 3 years ago

• PAN-OS thinks the cert for https[:]//supportfiles[.]firemon[.]com is untrusted. Why?

  Didn’t know that one. I generally use ssl server test at https://ssllabs.com/ssltest. Source: over 3 years ago

• Looking for help with VIRTUAL_HOST set up and 502 Bad Gateway (possible bad SSL?)

  As far as the SSL error, your browser does not consider the certificate to be valid. It looks like you’re trying to use Let’s Encrypt (based on your .well-known/acme-challenge location. You’ll also need to provide the intermediary... Source: over 3 years ago

View more