« SSL Labs: Improved Elliptic Curve and TLS 1.2 detection | Main | Two bugs in mod_sslhaf fixed » SSL is easy to use but also very easy to use incorrectly. The ecosystem, which is built of the specifications, the implementations, the CAs and the PKI, is full of traps, each of which is very easy to fall into. Once I started to spend significant time thinking about SSL I set out to build a model of

