ssllabs is complaining...problems :(
I was so happy as I was done with the development and deployment of my application. It was a peaceful life, then all of a sudden one of my wise friend asked "What is the strength of your SSL encryption". I thought it should be using most secure SSL encryption, and I went ahead and check SSLlabs.
But when I saw the results...I was like,
OK. So we have problems here. Precisely four problems in my case
My website still support SSL2, and it is week and vulnerable. (Wiki Link , http://www.contextis.com/research/blog/server-technologies-ssl2-should-it-keep-you-awake-/)
It is vulnerable to BEAST attack
It is vulnerable to CRIME attack
We still support some ciphers of 40/56 bits















