SSL Report for windy.com

Your SSL score:
C
Recheck SSL
The site contains insecure HTTP links, potentially compromising user data.
HSTS policy absent: implement to enhance connection security
Potential LUCKY13 vulnerability: TLS CBC padding oracle attack risk
Certificate is trusted
Unsecure HTTP protocol is disabled
HSTS Strict Security is Disabled
Redirect to HTTPS Secure Enabled
Strong TLS Protocols Enabled
Strong Cipher Suites are Used
SSL check #1 for windy.com  ( 35.201.88.123 )
Common Name: windy.com SAN: *.windy.com, windy.com Server: 35.201.88.123 Expire At: 2025-06-24 Invalid Domain: No HTTP Enabled: No HSTS Enabled: No HTTPS Redirect: Yes Server Info: nginx/1.22.1 Signature: nginx/1.22.1
TLS and Compatibility
TLS 1.3: Yes TLS 1.2: Yes TLS 1.1: No TLS 1.0: No SSL 3: No SSL 2: No Weak Cipher Suites: No HSTS Max Age:0 Forward Secrecy: Yes OCSP Stapling: No Session Resumption Tickets: No Session Resumption Caching: No
SSL check #2 for www.windy.com  ( 13.35.58.23 )
Common Name: windy.com SAN: *.windy.com, windy.com Server: 13.35.58.23 Expire At: 2025-06-24 Invalid Domain: No HTTP Enabled: No HSTS Enabled: No HTTPS Redirect: Yes Server Info: nginx/1.22.1 Signature: nginx/1.22.1
TLS and Compatibility
TLS 1.3: Yes TLS 1.2: Yes TLS 1.1: No TLS 1.0: No SSL 3: No SSL 2: No Weak Cipher Suites: No HSTS Max Age:0 Forward Secrecy: Yes OCSP Stapling: No Session Resumption Tickets: No Session Resumption Caching: No
  • GreenIT, Inc.
    USA, New York