httpstest — check a host's HTTPS / TLS security posture
SYNOPSIS
httpstest [host]
DESCRIPTION
Assesses the HTTPS security of a host. With no argument, checks the current terminal host.
Two things are measured:
- a browser-observable check — whether the TLS handshake succeeds over HTTPS (a failed handshake or connection rejects the request), with the round-trip time;
- a security grade from the Mozilla HTTP Observatory (A+ … F), which grades the HTTP security headers (HSTS, CSP, cookies, …).
The browser sandbox cannot inspect the negotiated TLS version, cipher suites or certificate chain — that needs a server-side scanner. For that full audit, httpstest prints an SSL Labs link.
USE CASES
- check your own site's security headers after a deployment;
- compare the HTTPS configuration of several sites;
- get a quick grade and the link to a full server-side SSL test.
NOTES
A fresh Observatory scan can take several seconds; the grade reflects the HTTP headers only, not the TLS setup (use the SSL Labs link for that).
EXAMPLES
httpstest httpstest toinel.com httpstest geeek.org