Site report for https://www.schneier.com
Lookup another site?
| Site title | Schneier on Security |
|---|---|
| Site rank | 6780 |
| Description | Not Present |
| Date first seen | June 2009 |
|---|---|
| Netcraft Risk Rating | 0/10 |
| Primary language | English |
| Site | https://www.schneier.com |
|---|---|
| Netblock Owner | New Dream Network, LLC |
| Domain | schneier.com |
| Nameserver | ns1.dreamhost.com |
| IP address | 66.33.204.254 (VirusTotal) |
| DNS admin | hostmaster@dreamhost.com |
| IPv6 address | Not Present |
| Reverse DNS | schneier.com |
| Domain registrar | networksolutions.com |
|---|---|
| Nameserver organisation | whois.dreamhost.com |
| Organisation | Counterpane Systems, 4602 W LAKE HARRIET PKWY, MINNEAPOLIS, 55410-1922, US |
| Hosting company | Dreamhost |
| Top Level Domain | Commercial entities (.com) |
| DNS Security Extensions | unknown |
| Hosting country | US |
| IP range | Country | Name | Description |
|---|---|---|---|
| 0.0.0.0-255.255.255.255 | N/A | IANA-BLK | The whole IPv4 address space |
| ↳ 66.0.0.0-66.255.255.255 | United States | NET66 | American Registry for Internet Numbers |
| ↳ 66.33.192.0-66.33.223.255 | United States | DREAMHOST-BLK1 | New Dream Network, LLC |
| ↳ 66.33.204.254 | United States | DREAMHOST-BLK1 | New Dream Network, LLC |
| Assurance | Domain validation |
|---|---|
| Common name | schneier.com |
| Organisation | Not Present |
| State | Not Present |
| Country | Not Present |
| Organisational unit | Domain Control Validated; Provided by New Dream Network, LLC; DreamHost Basic SSL |
| Subject Alternative Name | schneier.com, www.schneier.com |
| Validity period | From Jun 24 2019 to Jul 17 2020 (12 months, 3 weeks, 2 days) |
| Matches hostname | Yes |
| Server | Apache |
| Public key algorithm | rsaEncryption |
| Protocol version | TLSv1.2 |
| Public key length | 2048 |
| Certificate check | ok |
| Signature algorithm | sha256WithRSAEncryption |
| Serial number | 0x1fd685bce00c1cd0ee53e4d00f6ea3ae |
| Cipher | ECDHE-RSA-AES128-GCM-SHA256 |
| Version number | 0x02 |
| Perfect Forward Secrecy | Yes |
|---|---|
| Next Protocol Negotiation | Not Present |
| Supported TLS Extensions | RFC4366 server name, RFC5746 renegotiation info, RFC4492 EC point formats, RFC5077 session ticket |
| Issuing organisation | Sectigo Limited |
| Issuer common name | Sectigo RSA Domain Validation Secure Server CA |
| Issuer unit | Not Present |
| Issuer location | Salford |
| Issuer country | GB |
| Issuer state | Greater Manchester |
| Certificate Revocation Lists | Not Present |
| Certificate Hash | 9Eziz5ktHaR2NBLGdTm1gRVHb00 |
| Public Key Hash | 8da1725d922f479311c6635cd795bd5080e295985c16d2e7bd4a965172e54b6a |
| OCSP servers | http://ocsp.sectigo.com - 99.85% uptime in the past 24 hours |
| OCSP stapling response | No response received |
Signed Certificate Timestamps (SCTs)
| Source | Log | Timestamp | Signature Verification |
|---|---|---|---|
| Certificate | Google Skydiver u9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YU= |
2019-06-24 20:24:57 | Success |
| Certificate | Cloudflare Nimbus 2020 Xqdz+d9WwOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVg= |
2019-06-24 20:24:57 | Success |
SSLv3/POODLE
This site does not support the SSL version 3 protocol.
More information about SSL version 3 and the POODLE vulnerability.
Heartbleed
The site offered the Heartbeat TLS extension prior to the Heartbleed disclosure, but is using a new certificate and no longer offers Heartbeat.
This test does not exploit the Heartbleed vulnerability but uses information from conventional HTTPS requests. More information about Heartbleed detection.
| Common name | AddTrust External CA Root |
|---|---|
| Organisational unit | AddTrust External TTP Network |
| Organisation | AddTrust AB |
| Validity period | From 2000-05-30 to 2020-05-30 |
| Common name | USERTrust RSA Certification Authority |
|---|---|
| Organisational unit | Not Present |
| Organisation | The USERTRUST Network |
| Validity period | From 2000-05-30 to 2020-05-30 |
| Common name | Sectigo RSA Domain Validation Secure Server CA |
|---|---|
| Organisational unit | Not Present |
| Organisation | Sectigo Limited |
| Validity period | From 2018-11-02 to 2030-12-31 |
A host's Sender Policy Framework (SPF) describes who can send mail on its behalf. This is done by publishing an SPF record containing a series of rules. Each rule consists of a qualifier followed by a specification of which domains to apply this qualifier to. For more information please see open-spf.org.
Warning: It appears that this host does not have an SPF record. There may be an SPF record on schneier.com: Check the site report.
Setting up an SPF record helps prevent the delivery of forged emails from your domain. Please note that an SPF record will only protect the domain it is added to and not any mail-enabled subdomains. It is recommended to add an SPF record to any subdomain with an MX record.
DMARC (Domain-based Message Authentication, Reporting and Conformance) is a mechanism for domain owners to indicate how mail purporting to originate from their domain should be authenticated. It builds on SPF and DKIM, providing a method to set policy and to give reporting of failures. For more information please see dmarc.org.
This host does not have a DMARC record. There may be a DMARC record on the site report for schneier.com: Check the site report.
Web Trackers are third-party resources loaded onto a webpage. Trackable resources include social sharing widgets, javascript files, and images. These trackers can be used to monitor individual user behaviour across the web. Data derived from these trackers are primarily used for advertising or analytics purposes.
No known trackers were identified.
-
Includes all the main technologies that Netcraft detects as running on the server such as PHP.
Technology Description Popular sites using this technology CGI Applications The Common Gateway Interface (CGI) is a standard method for web server software to delegate the generation of web content to executable files www.gnu.org, www.drudgereport.com, www.post.japanpost.jp XML No description www.msn.com, cdn.bannerflow.com, yandex.ru Perl Perl is a high-level, general-purpose, interpreted, dynamic programming language www.centrum24.pl, www.schneier.com, open.weixin.qq.com SSL A cryptographic protocol providing communication security over the Internet login.microsoftonline.com -
Includes all the main technologies that run on the browser (such as JavaScript and Adobe Flash).
Technology Description Popular sites using this technology JavaScript Widely-supported programming language commonly used to power client-side dynamic content on websites www.google.com, medium.com, t.co -
Frameworks or libraries allow for easier development of applications by providing an Application Program Interface (API) or a methodology to follow whilst developing.
Technology Description Popular sites using this technology jQuery A JavaScript library used to simplify the client-side scripting of HTML www.amazon.fr, www.amazon.co.uk, www.arco.co.uk -
RSS Rich Site Summary is a family of web feed formats used to publish frequently updated works such as blog entries, news headlines, audio, and video in a standardized format.
Technology Description Popular sites using this technology Atom An XML language and HTTP protocol used in web publishing www.legacy.com, www.w3.org, www.heise.de -
A character encoding system consists of a code that pairs each character from a given repertoire with something else such as a bit pattern, sequence of natural numbers, octets, or electrical pulses in order to facilitate the transmission of data (generally numbers or text) through telecommunication networks or for data storage.
Technology Description Popular sites using this technology UTF8 UCS Transformation Format 8 bit vars.hotjar.com, disqus.com -
HTTP compression is a capability that can be built into web servers and web clients to make better use of available bandwidth, and provide greater transmission speeds between both.
Technology Description Popular sites using this technology Gzip Content Encoding Gzip HTTP Compression protocol www.seznam.cz, www.ups.com, www.tsetmc.com -
A Document Type Declaration, or DOCTYPE, is an instruction that associates a particular SGML or XML document (for example, a webpage) with a Document Type Definition (DTD).
Technology Description Popular sites using this technology HTML5 Latest revision of the HTML standard, the main markup language on the web www.googleadservices.com, github.com, teams.microsoft.com HTML The main markup language used for displaying web pages within browsers www.elmundo.es, www.uol.com.br, console.aws.amazon.com -
HTML5 is a markup language for structuring and presenting content for the World Wide Web and a core technology of the Internet. It is the fifth revision of the HTML standard.
Technology Description Popular sites using this technology Viewport meta tag HTML5 tag usually used for mobile optimization accounts.google.com, login.salesforce.com, login.live.com -
Cascading Style Sheets (CSS) is a style sheet language used for describing the presentation semantics (the look and formatting) of a document written in a markup language (such as XHTML).
Technology Description Popular sites using this technology External Styles defined within an external CSS file www.microsoft.com, www.linkedin.com, www.paypal.com