This is just a placeholder for occasionally when I need to make a large file available for download, or odd little jobs like that. Please contact jamie AT blacktraffic.co.uk if you have been given a link and it doesn't work. Now and then I use it to host malware in order to test web proxy filtering - you have been warned.

The SSL configuration is done like this - using latest Debian:

SSLEngine on
SSLCertificateFile /etc/apache2/www_blacktraffic_co_uk.crt
SSLCertificateChainFile /etc/apache2/www_blacktraffic_co_uk.ca-bundle
SSLCertificateKeyFile /etc/apache2/www.blacktraffic.co.uk.key
SSLProtocol all -SSLv2 -SSLv3
SSLHonorCipherOrder on
SSLCipherSuite          ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:DHE-DSS-AES128-GCM-SHA256:kEDH+AESGCM:ECDHE-RSA-AES128-SHA256:ECDHE-ECDSA-AES128-SHA256:ECDHE-RSA-AES128-SHA:ECDHE-ECDSA-AES128-SHA:ECDHE-RSA-AES256-SHA384:ECDHE-ECDSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:ECDHE-ECDSA-AES256-SHA:DHE-RSA-AES128-SHA256:DHE-RSA-AES128-SHA:DHE-DSS-AES128-SHA256:DHE-RSA-AES256-SHA256:DHE-DSS-AES256-SHA:DHE-RSA-AES256-SHA:AES128-GCM-SHA256:AES256-GCM-SHA384:AES128-SHA256:AES256-SHA256:AES128-SHA:AES256-SHA:AES:CAMELLIA:DES-CBC3-SHA:!aNULL:!eNULL:!EXPORT:!DES:!3DES:!RC4:!MD5:!PSK:!aECDH:!EDH-DSS-DES-CBC3-SHA:!EDH-RSA-DES-CBC3-SHA:!KRB5-DES-CBC3-SHA
SSLCompression Off
Header set Strict-Transport-Security "max-age=16070400; includeSubDomains"
Header set X-Frame-Options "SAMEORIGIN"
Header set X-Clacks-Overhead "GNU Terry Pratchett"
weakdh.org suggests the following - though I suspect this may have been fixed by upgrading to latest Apache/openssl:
openssl dhparam -out dhparams.pem 2048
cat dhparams.pem >> www_blacktraffic_co_uk.crt
You may check the Qualys SSL rating of this config here (A+ at time of writing) or - using a different tool - here.

You can check what cipher suites your browser supports (and in what order) here: https://cc.dcsec.uni-hannover.de.

Link to EICAR test file here

Hosted by tilaa.com - https://www.tilaa.com/ - CO2 neutral, IPv6 ready as standard. We like them.

ipv6 ready