← All drillsTLS / Encryption Config Auditor
What you'll be able to do- ✓Build a TLS auditor that grades a server's encryption the way SSL Labs does
- ✓Parse an X.509 certificate and read its validity, key size, issuer, and whether it is self-signed
- ✓Judge the negotiated TLS protocol and cipher as strong or weak, and explain why
- ✓Apply SSL-Labs-style grading — caps and penalties that turn many checks into one letter grade
- ✓Audit a fleet of hosts and produce a report that flags expiring certs and weak configs
Build the scanner behind SSL Labs and Mozilla Observatory — point it at a server and get a letter grade for the encryption protecting its users, catching expired certs, dead protocols, and weak ciphers before an attacker exploits them.
⌁ TLS posture scanning is how the web is kept encrypted — Qualys SSL Labs, Cloudflare, and Mozilla grade millions of sites, and every security team audits what protects its data in transit.
Start this internshipCreate an account to unlock the 8 sections, the workbench, and AskThili.
BeginSections
1. The TLS / Encryption Config Auditor
🔒 locked2. Lesson 1 - What TLS protects, and what breaks it
🔒 locked3. Lesson 2 - Read a certificate
🔒 locked4. Lesson 3 - Is the certificate healthy?
🔒 locked5. Lesson 4 - Protocols & ciphers
🔒 locked6. Lesson 5 - Grade it
🔒 locked7. Lesson 6 - Audit a fleet
🔒 locked8. Lesson 7 - Ship your TLS auditor
🔒 lockedDig deeper
📄The Matter of Heartbleed (Durumeric et al., 2014, IMC) — measuring TLS in the wild
paper🔗Mozilla — Server Side TLS configuration guidelines
docs🔗Qualys SSL Labs — SSL Server Rating Guide (grading methodology)
docsPart of these learning paths
I'm a security professional and I want to test AI/ML systems for vulnerabilities
View path →