testssl.sh :verified:✓

Mastodon @testssl@infosec.exchange

⚔ Compare ☆ Watch Own this channel?

🔄 Data last refreshed 4 days ago

🤝

Make a deal with testssl.sh :verified:

🔒 Paid proposals held safely in escrow — released only when the work's approved.

Followers

407

Account age

3 yrs

🧰 Free analysis for testssl.sh :verified:

🕵️ Fake follower check 📊 Engagement rate 💰 What they charge

Known for

The will be a bigger update on the client simulation soon
- Apple's OS 26.x finally support one #KEM (X25519MLKEM768)
- #OpenSSL >=4.0.0 comes with new curves, some #SM2 related. And with a whopping 27 signature algorithms
#PQC

7 views The will be a bigger update on the client simulation soon - Apple's OS 26.x finally support one #KEM (X25519MLKEM768) - #OpenSSL >=4.0.0 comes with new curves, some #SM2 related. And with a whopping 27 signature algorithms #PQC

Update of client simulation has landed in 3.3dev
Using ja3/ja4 checksums some simulations were able to identify as the same so that it was possible to put them in one line.

4 views Update of client simulation has landed in 3.3dev Using ja3/ja4 checksums some simulations were able to identify as the same so that it was possible to put them in one line.

TL;DR: OpenSSH has since version 9.0 PQC kx enabled. Use it!
You might want to check the key exchange algos for SSH, if you had hardened them on the client or server side like years back -- unless you want your ssh sessions be vulnerable to "store now, decrypt later" attacks .
Only newer #OpenSSH clients (>10.1) issue a warning if the kx is not #PQC safe.
https://www.openssh.org/pq.html
(ssh -

4 views TL;DR: OpenSSH has since version 9.0 PQC kx enabled. Use it! You might want to check the key exchange algos for SSH, if you had hardened them on the client or server side like years back -- unless you want your ssh sessions be vulnerable to "store now, decrypt later" attacks . Only newer #OpenSSH clients (>10.1) issue a warning if the kx is not #PQC safe. https://www.openssh.org/pq.html (ssh -

Thanks to potato-20 who revived an old PR from tosticated , testssl.sh 3.3dev now also has a check against the HSTS preload list -- when "--phone-out" is supplied.

3 views Thanks to potato-20 who revived an old PR from tosticated , testssl.sh 3.3dev now also has a check against the HSTS preload list -- when "--phone-out" is supplied.

📊 Post engagement

Avg engagement / post

0.7%

Engagement vs followers

Nov 2022

On Mastodon since

🔥 Top post: The will be a bigger update on the client simulation soon - Appl · 7 likes + reposts

📊 Activity & format

Posting cadence

0.78 / week

A lower-frequency account — each post lands with more weight.

Content mix

Mostly text

Recent: 7 text · 5 image · 0 video.

Follower / following

8.7×

Follows 47 back. A strong ratio — an audience that follows them, not a follow-for-follow network.

Recent posts

View on Mastodon ↗

🔥 Top post The will be a bigger update on the client simulation soon - Apple's OS 26.x finally support one #KEM (X25519MLKEM768) - #OpenSSL >=4.0.0 comes with new curves, some #SM2 related. And with a whopping 27 signature algorithms #PQC ★ 7

RE: https://infosec.exchange/@testssl/116907554140004771 Ok, here are security bug fix releases * 3.2.4. https://github.com/testssl/testssl.sh/releases/tag/v3.2.4 * 3.3dev-snapshot-2607 https://github.com/testssl/testssl.sh/releases/tag/v3… ★ 3 Attention: There was a #XSS #vulnerability in testssl.sh . XSS payloads can end up unfiltered in the HTML output file of testssl.sh . Affected is the Location HTTP header where outputs were not sanitized properly. It is advised to upgrade… ★ 1 RE: https://infosec.exchange/@testssl/116794387791641181 merged ★ 2

New feature coming in: DNS HTTP Resource Record in testssl.sh 3.3dev PR https://github.com/testssl/testssl.sh/pull/3047 will be merged by tomorrow. The dig command from MacOS delivers not the records in clear text but a byte stream. That m… ★ 1

Thanks to potato-20 who revived an old PR from tosticated , testssl.sh 3.3dev now also has a check against the HSTS preload list -- when "--phone-out" is supplied. ★ 3 Two smaller updates to testssl.sh (3.3dev) this week: - for client simulation forward secrecy info added to file output - warning for deprecated and other command line options end up in file output - scanning IP addresses and not host name… ★ 4

Update of client simulation has landed in 3.3dev Using ja3/ja4 checksums some simulations were able to identify as the same so that it was possible to put them in one line. ★ 4 #OpenSSL 4.0 has been released! And the busy bee dcooper16 made some adjustments to #testssl.sh - syntax when using OpenSSL 4.0 with testssl.sh. And features like curveSM2 and curveSM2MLKEM768 . https://github.com/openssl/openssl/blob/op… ★ 4

TL;DR: OpenSSH has since version 9.0 PQC kx enabled. Use it! You might want to check the key exchange algos for SSH, if you had hardened them on the client or server side like years back -- unless you want your ssh sessions be vulnerable… ★ 4 Feisty Ducks Newsletter sheds some light onto Merkle Tree Certificates and their complexity. Also there's some little background information about why Google recently scared us wrt quantum computer break through. https://www.feistyduck.com… https://blog.google/innovation-and-ai/technology/safety-security/cryptography-migration-timeline/ 2029. You're serious ? If so, why ? #PQC ★ 1

🐘 Community & instance

Home server

infosec.exchange

A cybersecurity & infosec server — its members and audience skew toward that niche, so expect a community-aligned, engaged following.

✅ Link-verified

Verified link

Proved ownership of a website linked on their profile — Mastodon's green-check verification, a real identity signal rather than a paid badge.

On Mastodon since

Nov 2022

Joined in the Twitter-exodus wave of late 2022 — part of the migration that made Mastodon a real destination.

💡 Facts

🗓️Joined Mastodon in 2022 — 3 years ago.

👁️Averages 3 views per post.

📤Posts about 0.8× per week.

🕵️ Fake follower check

Estimated

75/100

Good Credibility score

92%

Real Real audience

Low Fake-follower risk

High Data confidence

Est. 92% real, active audience · Low fake-follower risk.
Engagement (~0.7% of followers engage each post) is around typical for Mastodon.
Verified account.
Established account (3+ years old).

Heuristic estimate from engagement, follower ratios, account age & growth — a screening signal, not a guarantee.

About

Fled from the birdsite to a separate account. Toots mostly in EN about testssl.sh and related stuff.

📸 Gallery

🔀 Audience overlap

Estimated

Estimated shared audience with similar creators — useful for avoiding overlap (or doubling down) when planning a campaign.

ClemensG 17%

Alice 🐝 15%

ohmrun 15%

Karl Schwartz, Artist advocate 14%

Allyson Lister 13%

Joku ihme mursu 10%

More like this

Find more →

Mastodon

Karl Schwartz, Artist advocate

@lymphomation@mastodon.social

407 Followers

Mastodon

Joku ihme mursu

@taigamursu@piipitin.fi

407 Followers

Mastodon

ClemensG

@clemensg@digitalcourage.social

407 Followers

Mastodon

Allyson Lister ✓

@allysonlister@fediscience.org

407 Followers

Mastodon

Alice 🐝 ✓

@alice_swaggen@flipping.rocks

407 Followers

Mastodon

ohmrun ✓

@ohmrun@indieweb.social

407 Followers

Auto-generated from Mastodon's public data — no affiliation with or endorsement by SocialDB. Is this you? Claim it · Remove

testssl.sh :verified:✓

Make a deal with testssl.sh :verified:

Known for

📊 Post engagement

📊 Activity & format

Recent posts

🐘 Community & instance

💡 Facts

🕵️ Fake follower check

About

📸 Gallery

🔀 Audience overlap

More like this

✉ Message testssl.sh :verified:

🎤 Event / appearance with testssl.sh :verified: