SSL Labs Grading Update: Forward Secrecy, Authenticated Encryption and ROBOT | Qualys

Summary: Qualys announced SSL Labs grading changes effective March 1, 2018: servers without forward secrecy or AEAD suites will be capped at grade B, and servers vulnerable to the ROBOT attack will receive an F. The update also assigns a T grade to Symantec certificates issued before June 2016, and SSL Labs began issuing warnings for these issues ahead of the change.
Key Takeaway: A public F grade for ROBOT exposure and a hard B ceiling for missing forward secrecy or AEAD turn configuration gaps into a visible, competitive liability that customers and partners can check without asking you.

Read the original at Qualys Blog ↗

Topics: Vulnerabilities & Patching
Related: Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026
PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026