Internet.nl document on ciphers

[yanainic]

Hi guys !
We are receiving some questions from some of our end users about tests on DNSSEC and on some parallel tests in other tools we found ciphers that are phase-out and/or deprecated in the Internet.nl tool and in others that are not yet (probably outdated), looking to check which reference source you use to see the status of the ciphers I found [link to https://english.ncsc.nl/publications/publications/2021/january/19/it-security-guidelines-for-transport-layer-security-2.1], do you still use it as a reference??"
Could you help us ?

Thanks in advance
Flavio

[bwbroersma]

Regarding the checking of DNSSEC algorithms, this is on the wish list:

• Optional DNS checks to add #1288

Regarding TLS ciphers:

• see this comment weak ciphers as sufficient. #1266 (comment):

  Internet.nl uses the NCSC-NL - IT Security Guidelines for Transport Layer Security (TLS) as baseline. NCSC-NL is currently in the process of revising the TLS guidelines document. If the update is published Internet.nl will follow.

• see the Roadmap 2025 #1345, note that v1.9 is not yet released, the v2.0 is actively being worked on ([hold] Fix #714 - Switch to (mainly) sslyze for TLS testing #1218), the NCSC-NL revising of the TLS guidelines probably won't be finished in June/July.

[yanainic]

Thank you so much !
Flavio