HTTPSTEST(1)
NAME
httpstest — check a host's HTTPS / TLS security posture
SYNOPSIS
httpstest [host]
DESCRIPTION
Assesses the HTTPS security of a host. With no argument, checks the current terminal host.
Two things are measured:
- a browser-observable check — whether the TLS handshake succeeds over HTTPS (a failed handshake or connection rejects the request), with the round-trip time;
- a security grade from the Mozilla HTTP Observatory (A+ … F), which grades the HTTP security headers (HSTS, CSP, cookies, …).
The browser sandbox cannot inspect the negotiated TLS version, cipher suites or certificate chain — that needs a server-side scanner. For that full audit, httpstest prints an SSL Labs link.
EXAMPLES
httpstest httpstest toinel.com httpstest geeek.org