TLS / Encryption Config Auditor

What you'll be able to do

✓Build a TLS auditor that grades a server's encryption the way SSL Labs does
✓Parse an X.509 certificate and read its validity, key size, issuer, and whether it is self-signed
✓Judge the negotiated TLS protocol and cipher as strong or weak, and explain why
✓Apply SSL-Labs-style grading — caps and penalties that turn many checks into one letter grade
✓Audit a fleet of hosts and produce a report that flags expiring certs and weak configs

Build the scanner behind SSL Labs and Mozilla Observatory — point it at a server and get a letter grade for the encryption protecting its users, catching expired certs, dead protocols, and weak ciphers before an attacker exploits them.

⌁ TLS posture scanning is how the web is kept encrypted — Qualys SSL Labs, Cloudflare, and Mozilla grade millions of sites, and every security team audits what protects its data in transit.

Start this internship

Create an account to unlock the 8 sections, the workbench, and askThili.

Begin