AnsweredAssumed Answered

"This site works only in browsers with SNI support" only reported in A-, not A+?

Question asked by Rant Oie on Mar 26, 2014
Latest reply on Dec 19, 2014 by |Mark|

If you look at the handshake simulation section of a site that gets an A+ grade (for example this one: https://www.ssllabs.com/ssltest/analyze.html?d=bugs.otr.im), you will see the same set of browsers that do not support SNI as you see in a report for a site that gets an A- grade (for example this one: https://www.ssllabs.com/ssltest/analyze.html?d=labs.riseup.net). Except that the A+ server notes that Java6u45 fails, where the A- one does not, because "Client does not support DH parameters > 1024 bits"

 

However, only the A- graded report shows the message at the top, "This site works only in browsers with SNI support" - why is that? Shouldn't the A+ one also say that? Or is there some difference between the two that makes the A+ one actually support SNI, but it is not being reported?

 

Thanks!         

Outcomes