[Owasp-singapore] Just for fun: Comparison of our local banks' SSL strength vs SingPass' SSL strength

Wong Onn Chee ocwong at usa.net
Wed Aug 25 05:52:38 EDT 2010


 Hi folks,

These are the screenshots from the Calomel SSL validation add-on for
Firefox.
Now, as an end user, you can visually see the SSL quality of the
"secure" sites you are visiting.

Screenshots of DBS, UOB, OCBC and SingPass are included for your review.
Accordingly to the Calomel report, in descending order of SSL strength:

1) SingPass - Best of 4 (green - 100%)
2) DBS (blue - 72%)
3) OCBC and UOB (orange - 48%)

Hmmm....did not realise OCBC and UOB are using RC4 symmetric encryption
in their SSL....

Any one who can share these findings with OCBC and UOB?

-- 

Best Regards
Onn Chee

-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot-SingPass-SSL.png
Type: image/png
Size: 136029 bytes
Desc: not available
Url : https://lists.owasp.org/mailman/private/owasp-singapore/attachments/20100825/d528f4a2/attachment-0004.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot-OCBC-SSL.png
Type: image/png
Size: 129201 bytes
Desc: not available
Url : https://lists.owasp.org/mailman/private/owasp-singapore/attachments/20100825/d528f4a2/attachment-0005.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot-UOB-SSL.png
Type: image/png
Size: 124944 bytes
Desc: not available
Url : https://lists.owasp.org/mailman/private/owasp-singapore/attachments/20100825/d528f4a2/attachment-0006.png 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screenshot-DBS-SSL.png
Type: image/png
Size: 134661 bytes
Desc: not available
Url : https://lists.owasp.org/mailman/private/owasp-singapore/attachments/20100825/d528f4a2/attachment-0007.png 


More information about the Owasp-singapore mailing list