ssleuth

KO | EN

gitlite — search

#javascript #python #hacktoberfest #ai #llm #golang #rust #linux #docker #java #awesome #kubernetes #awesome-list #vue

(★ 108)

A firefox add-on to rate the quality of HTTPS connections

File Explorer

Download Latest Version (.zip)

- - btn-large-blue.png
  - btn-large-gray.png
  - btn-large-green.png
  - btn-large-orange.png
  - btn-large-red.png
  - btn-small-blue.png
  - btn-small-gray.png
  - btn-small-green.png
  - btn-small-orange.png
  - btn-small-red.png
  - darwin.css
  - panel-clipboard.png
  - panel-pref.png
  - ssleuth-icon.png
  - ssleuth.css
  - starred-empty.png
  - starred-half.png
  - starred.png
  - status-bad.png
  - status-good.png
  - status-high.png
  - status-medium.png
- framescript.js
- preferences-ui.js
- preferences.xul
- - panel.properties
  - preferences.dtd
- - panel.properties
  - preferences.dtd
- - panel.properties
  - preferences.dtd
- - panel.properties
  - preferences.dtd
- - jdenticon.min.js
- cipher-suites.js
- observer.js
- panel.js
- preferences.js
- ssleuth-ui.js
- ssleuth.js
- utils.js
- windows.js
.editorconfig
bootstrap.js
chrome.manifest
install.rdf
LICENSE.txt
README.md

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

**_Update Jan 27, 2020 :
SSleuth development has stopped. Please look at the alternatives [IndicateTLS](https://addons.mozilla.org/firefox/addon/indicatetls/), [Certainly Something](https://addons.mozilla.org/en-US/firefox/addon/certainly-something/)_**

**_Update Sep 2, 2018 :
Please note : This add-on is not compatible with Firefox 57+ (Quantum). For more details :  https://github.com/sibiantony/ssleuth/issues/78_**

SSleuth
=======

SSleuth is a Firefox addon that ranks an established SSL/TLS connection to estimate
the connection strength. It also gives a brief summary of the important SSL/TLS connection 
parameters.

* Mozilla download page : https://addons.mozilla.org/en-US/firefox/addon/ssleuth/

![Screenshot mozilla.org](https://addons.cdn.mozilla.net/user-media/previews/full/176/176963.png)

This was developed with the intent to rate the encryption ciphers used in an
SSL/TLS connection. The project maintains a list of cipher suites that are shipped with
Firefox and a rank for each of them.
The rankings are mainly inspired from Qualys's SSL labs server testing tool. The 
SSL labs testing is meant for web servers, more sophisticated and is much more 
than a cipher ranking service. However to know which ciphers are used when a user
connects to a website, browser support and/or an addon is necessary. Firefox started
exposing the full cipher suite name from version 25.0. Users can see the
cipher suite by going to the `URL notification lock icon -> More information`
or `Page Info -> Security -> Technical details`.
The user can see the cipher suite used for connection and firefox's
assessment of the strength of the cipher.

SSleuth attempts to enhance this visibility of ciphers to the user,
by ranking it and appropriateley color coding it. 
The addon panel also gives information on perfect forward secrecy, firefox 
connection status and the certificate details.

## Rating Rationale

The rating mechanism is in the early stages now, and might change
in future. See the wiki page on [Rating Mechanism](https://github.com/sibiantony/ssleuth/wiki/Rating-Mechanism) for more information.

## Disabling weak ciphers

Beginning with version 0.2.3 SSleuth supports enabling and disabling cipher suites.
Users can create a list of cipher suites to toggle, and use the notifier right click
menu to toggle them. More details on [enabling/disabling cipher suites](https://github.com/sibiantony/ssleuth/wiki/Cipher-suites-enabling-and-disabling) in the wiki.

## Graphical User Interface

There is a URL bar notification box (next to Firefox's own notification
area). A 'sleuth' cap and the rank notifies the user of the estimated strength.
There is an optional toolbar button mode (choose from preferences), if the
user wishes to move around a toolbar button.

### Color coding

The color of the notification area changes from green (very good), to blue (good),
orange (medium) and red(bad).

### Keyboard shortcut

The panel can be easily brought up with the key combinations 'Ctrl' + 'Shift' + '}'. 
If the keyboard shortcut interferes with any existing addon and/or your keyboard doesn't
support the key combination, please report it.
It is however possible to change the keyboard shortcut via configuration.
* Navigate to '`about:config`'
* Key in `extensions.ssleuth` to find all ssleuth configurables, and look for `extensions.ssleuth.ui.keyshortcut`
* The preference type is a string and you can change the modifieres and key. Please follow
mozilla guidelines for [modifiers](https://developer.mozilla.org/en-US/docs/XUL/Attribute/modifiers) and [keys](https://developer.mozilla.org/en-US/docs/XUL/Attribute/key) to set the shortcut. SSleuth uses 'keys' rather than 'keycodes'.

## License

SSleuth is released under [GPLv3.0](https://www.gnu.org/licenses/gpl-3.0.html).
You should find the license text in the About page of add-on preferences.

Jdenticon 1.3.2 zlib license, jdenticon.com (c) Daniel Mester Pirttijärvi

ssleuth

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

ssleuth

File Explorer

Today's picks

Was this content helpful?

Recent Feedback

Download README