AAE.

Onderdeel van de Internet.nl-norm

Two or more name servers of your domain have an IPv6 address.

[
  [
    "ns1.argewebhosting.eu.",
    [
      "2a05:1500:702:0:1c00:eff:fe00:ce"
    ],
    [
      "31.25.98.210"
    ]
  ],
  [
    "ns3.argewebhosting.nl.",
    [
      "2a05:1500:600:7:1c00:55ff:fe00:f1a"
    ],
    [
      "92.63.168.137"
    ]
  ],
  [
    "ns2.argewebhosting.com.",
    [
      "2a05:1500:702:0:1c00:13ff:fe00:a5"
    ],
    [
      "31.25.98.169"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

Not all name servers that have an IPv6 address are reachable over IPv6.

[
  [
    "ns1.argewebhosting.eu.",
    [
      "2a05:1500:702:0:1c00:eff:fe00:ce"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

None of your web servers has an IPv6 address.

[
  [
    "www.aae.tech",
    [],
    [
      "185.95.13.236"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.

"detail tech data not-tested"

Onderdeel van de Internet.nl-norm

This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.

"detail tech data not-tested"

Onderdeel van de Internet.nl-norm

Your domain is DNSSEC signed.

[
  [
    "www.aae.tech",
    "Realtime Register B.V."
  ]
]

Onderdeel van de Internet.nl-norm

Your domain is secure, because its DNSSEC signature is valid.

[
  [
    "www.aae.tech",
    "detail tech data secure"
  ]
]

Onderdeel van de Internet.nl-norm

Your website is reachable over HTTPS.

[
  [
    "185.95.13.236",
    "detail tech data yes"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server automatically redirects visitors from HTTP to HTTPS on the same domain.

[
  [
    "185.95.13.236",
    "detail tech data yes"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server offers an HSTS policy with a cache validity period ( max-age ) that is not sufficiently long (i.e. less than 1 year).

[
  [
    "185.95.13.236",
    [
      "max-age=15768000; includeSubDomains"
    ]
  ]
]

Advies of informatie

Your web server supports HTTP compression, which could be a security risk.

[
  [
    "185.95.13.236",
    "detail tech data yes"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports secure parameters for Diffie-Hellman key exchange.

[
  [
    "185.95.13.236",
    ""
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports one or more cipher suites that should be phased out as they are weaker, although you might still use them if absolutely needed. In a future update, they will likely become insufficient.

[
  [
    "185.95.13.236",
    [
      "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
      "TLS_ECDHE_RSA_WITH_ARIA_256_GCM_SHA384"
    ],
    [
      "detail tech data phase-out",
      "detail tech data phase-out"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

Your web server does not enforce its own preference for cipher suites in descending order of their security level.

[
  [
    "185.95.13.236",
    "TLS_ECDHE_RSA_WITH_ARIA_128_GCM_SHA256",
    "TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports secure TLS versions only.

[
  [
    "185.95.13.236",
    [
      "TLS 1.3",
      "TLS 1.2"
    ],
    [
      "detail tech data good",
      "detail tech data sufficient"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

Your web server does not support TLS compression.

[
  [
    "185.95.13.236",
    "detail tech data no"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports secure renegotiation.

[
  [
    "185.95.13.236",
    "detail tech data yes"
  ]
]

Advies of informatie

Your web server does not allow client-initiated renegotiation.

[
  [
    "185.95.13.236",
    [
      {
        "msgid": "detail tech data tls-renegotiation-client not-allowed",
        "context": {}
      }
    ]
  ]
]

Onderdeel van de Internet.nl-norm

The trust chain of your website certificate is complete and signed by a trusted root certificate authority.

[
  [
    "185.95.13.236",
    ""
  ]
]

Onderdeel van de Internet.nl-norm

The public key of your website certificate is based on a signing algorithm with parameters that should be phased out as they are weaker, although you might still use them if absolutely needed. In a future update, they will likely become insufficient.

[
  [
    "185.95.13.236",
    [
      "aae.tech: RSAPublicKey-2048",
      "detail tech data phase-out",
      "YR1: RSAPublicKey-2048",
      "detail tech data phase-out"
    ]
  ]
]

Onderdeel van de Internet.nl-norm

Your website certificate is signed using a secure signing algorithm and hash function.

[
  [
    "185.95.13.236",
    ""
  ]
]

Onderdeel van de Internet.nl-norm

The domain name of your website matches the domain name on your website certificate.

[
  [
    "185.95.13.236",
    ""
  ]
]

Advies of informatie

Your domain does not have CAA.

[
  [
    {
      "msgid": "detail tech data caa not-found",
      "context": {}
    }
  ],
  [
    {
      "msgid": "detail tech data caa missing-required-property-issue",
      "context": {
        "property_tag": "issue"
      }
    }
  ]
]

Advies of informatie

Your website domain does not contain a TLSA record for DANE.

[
  [
    "185.95.13.236",
    "detail tech data no"
  ]
]

Advies of informatie

This subtest did not run, because either a parent test that this subtest depends on gave a negative result, or not enough information was available to run this subtest.

[
  [
    "185.95.13.236",
    "detail tech data not-tested"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server does not support 0-RTT.

[
  [
    "185.95.13.236",
    "detail tech data no"
  ]
]

Advies of informatie

Your website certificate does not have an OCSP pointer, so OCSP stapling does not apply.

[
  [
    "185.95.13.236",
    "detail tech data not-applicable"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports a hash function for key exchange that should be phased out as it is weaker, although you might still use it if absolutely needed. In a future update, it will likely become insufficient.

[
  [
    "185.95.13.236",
    "SHA224"
  ]
]

Onderdeel van de Internet.nl-norm

Your web server supports EMS.

[
  [
    "185.95.13.236",
    "detail tech data yes"
  ]
]

Advies of informatie

Your web server does not offer securely configured X-Frame-Options.

[
  [
    "185.95.13.236",
    ""
  ]
]

Advies of informatie

Your web server either does not offer a Referrer-Policy and thus relies on the default browser policy, or your web server offers a Referrer-Policy with a policy value that should be used with caution because of its potential impact on security and privacy.

[
  [
    "185.95.13.236",
    [
      {
        "msgid": "detail tech data http-referrer-policy no-policy",
        "context": {}
      }
    ]
  ]
]

Advies of informatie

Your web server does not offer Content-Security-Policy (CSP), or does offer CSP with certain insecure settings.

[
  [
    "185.95.13.236",
    [
      {
        "msgid": "detail tech data http-csp no-policy-found",
        "context": {}
      }
    ]
  ]
]

Advies of informatie

Your web server does not offer X-Content-Type-Options.

[
  [
    "185.95.13.236",
    ""
  ]
]

Advies of informatie

Your web server does not offer a security.txt file in the right location, it could not be retrieved, or its content is not syntactically valid.

[
  [
    "185.95.13.236",
    [
      {
        "msgid": "detail tech data http-securitytxt requested-from",
        "context": {
          "hostname": "www.aae.tech"
        }
      },
      {
        "msgid": "detail tech data http-securitytxt no_security_txt_404",
        "context": {}
      }
    ]
  ]
]

Voorwaardelijke controle

For at least one of the IP addresses of your web server no RPKI Route Origin Authorisation (ROA) is published.

[
  [
    "www.aae.tech",
    "185.95.13.236",
    "detail tech data no"
  ]
]

Voorwaardelijke controle

At least one IP address of your web server has a NotFound validation state. There is no RPKI Route Origin Authorization (ROA) published for the route announcement of each of the affected IP addresses.

[
  [
    "www.aae.tech",
    "185.95.12.0/22",
    "AS197902",
    "not-found"
  ]
]

Voorwaardelijke controle

For all IP addresses of your name servers an RPKI Route Origin Authorisation (ROA) is published.

[
  [
    "ns1.argewebhosting.eu.",
    "31.25.98.210",
    "detail tech data yes"
  ],
  [
    "...",
    "2a05:1500:702:0:1c00:eff:fe00:ce",
    "detail tech data yes"
  ],
  [
    "ns2.argewebhosting.com.",
    "31.25.98.169",
    "detail tech data yes"
  ],
  [
    "...",
    "2a05:1500:702:0:1c00:13ff:fe00:a5",
    "detail tech data yes"
  ],
  [
    "ns3.argewebhosting.nl.",
    "92.63.168.137",
    "detail tech data yes"
  ],
  [
    "...",
    "2a05:1500:600:7:1c00:55ff:fe00:f1a",
    "detail tech data yes"
  ]
]

Voorwaardelijke controle

All IP addresses of your name servers have a Valid validation state. The route announcement of these IP addresses is matched by the published RPKI Route Origin Authorisation (ROA).

[
  [
    "ns1.argewebhosting.eu.",
    "31.25.96.0/21",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "31.25.98.0/24",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "2a05:1500::/29",
    "AS48635",
    "valid"
  ],
  [
    "ns2.argewebhosting.com.",
    "31.25.96.0/21",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "31.25.98.0/24",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "2a05:1500::/29",
    "AS48635",
    "valid"
  ],
  [
    "ns3.argewebhosting.nl.",
    "92.63.168.0/24",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "92.63.168.0/21",
    "AS48635",
    "valid"
  ],
  [
    "...",
    "2a05:1500:600::/40",
    "AS48635",
    "valid"
  ]
]