I tested my SSL and got B. Is there any way of improving that?

It's relevant that you have minimal 80 % per check and no critical warnings.

I have 2 * 100 and 2 * 90 %, that's ok.

Somewhere Ssllabs says: 2048 bit are ok -> that's not 100 %.

More important is HSTS and these other things. There you have errors you should fix.

PS: Sample: If you use an external Javascript without SRI and that external server is hacked, it's like an amazing XSS hack.

PPS:

Is SSL Enough?

No. A non-trivial web site cannot be secure if it does not implement SSL, but SSL is not enough. SSL deals with only one aspect of security, and that is the security of the communication channel between a web site and its users. SSL does not and cannot address a number of possible security issues that may exist on a web site. View SSL as a foundation on which to build, but the foundation alone is not enough.

The SSL configuration checked via Ssllabs is only one small part. If your website has other fundamental errors or if Sql-injections or Xss hack are possible, your Grade A+ doesn't help.

1 Like