diff --git a/doc/testssl.1.md b/doc/testssl.1.md index c15f3ee..a866739 100644 --- a/doc/testssl.1.md +++ b/doc/testssl.1.md @@ -407,9 +407,6 @@ As of writing, these checks are missing: * Exportable key exchange - should give **40** points in `set_key_str_score()` * Weak key (Debian OpenSSL Flaw) - should give **0** points in `set_key_str_score()` -#### STARTTLS -This program rates STARTTLS connections, exactly according to the specification. However, this program adds a grade warning about STARTTLS is being used. This is not apart of the rating specification, and limits the grade a STARTTLS connection can have, to a maximum of `A-`. - #### Implementing new grades caps or -warnings To implement a new grading cap, simply call the `set_grade_cap()` function, with the grade and a reason: ```bash diff --git a/testssl.sh b/testssl.sh index 9c64829..d5b3c3b 100755 --- a/testssl.sh +++ b/testssl.sh @@ -20802,7 +20802,7 @@ run_rating() { pr_headlineln " Rating (experimental) " outln - [[ -n "$STARTTLS_PROTOCOL" ]] && set_grade_warning "STARTTLS encryption is opportunistic. The grade is very insignificant" + [[ -n "$STARTTLS_PROTOCOL" ]] && set_grade_cap "T" "Encryption via STARTTLS is not mandatory (opportunistic). This leads to a false sense of security" # Sort the reasons. This is just nicer to read in genereal IFS=$'\n' sorted_reasons=($(sort -ru <<<"${GRADE_CAP_REASONS[*]}"))