QUALYS SSL LABSのSSL Server Testに出てくるメッセージ一覧

QUALYS SSL LABSのSSL Server Test (https://www.ssllabs.com/ssltest/) は、TLSレイヤのいろいろな脆弱性を検出してくれる便利なツールですが、どういうわけか、診断メッセージの一覧表が見当たらなかったので、以下の表は私が見つけた範囲内での診断メッセージ一覧です。

|等級|メッセージ|
|--:|:--|:--|
|<font id=1 color=green>A+</font>|HTTP Strict Transport Security (HSTS) with long duration deployed on this server. [MORE INFO](https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security)|
|<font id=2 color=green>A</font>|Intermediate certificate has a weak signature. Upgrade to SHA2 as soon as possible to avoid browser warnings. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know) |
|<font id=3 color=green>A</font>|Certificate has a weak signature and expires after 2015. Upgrade to SHA2 to avoid browser warnings. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2014/09/09/sha1-deprecation-what-you-need-to-know) |
|<font id=4 color=green>A-</font>|The server does not support Forward Secrecy with the reference browsers. Grade reduced to A-. [MORE INFO](https://en.wikipedia.org/wiki/Forward_secrecy) |
|<font id=5 color=green>A-</font>|There is no support for secure renegotiation. Grade reduced to A-. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2010/10/06/disabling-ssl-renegotiation-is-a-crutch-not-a-fix) |
|<font id=6 color=orange>B</font>|This server accepts RC4 cipher, but only with older protocol versions. Grade capped to B. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2013/03/19/rc4-in-tls-is-broken-now-what) |
|<font id=7 color=orange>B</font>|This server supports weak Diffie-Hellman (DH) key exchange parameters. Grade capped to B. [MORE INFO](https://weakdh.org) |
|<font id=8 color=orange>B</font>|This server uses SSL 3, which is obsolete and insecure. Grade capped to B. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2014/10/15/ssl-3-is-dead-killed-by-the-poodle-attack) |
|<font id=9 color=orange>B</font>|This server's certificate chain is incomplete. Grade capped to B. |
|<font id=10 color=orange>C</font>|The server supports only older protocols, but not the current best TLS 1.2. Grade capped to C. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2015/05/22/ssl-labs-increased-penalty-when-tls-12-is-not-supported) |
|<font id=11 color=orange>C</font>|This server does not mitigate the [CRIME attack](https://community.qualys.com/blogs/securitylabs/2012/09/14/crime-information-leakage-attack-against-ssltls). Grade capped to C. |
|<font id=12 color=orange>C</font>|This server is vulnerable to the POODLE attack. If possible, disable SSL 3 to mitigate. Grade capped to C. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2014/10/15/ssl-3-is-dead-killed-by-the-poodle-attack) |
|<font id=13 color=orange>C</font>|This server uses RC4 with modern protocols. Grade capped to C. |
|<font id=14 color=red>F</font>|Experimental: This server is vulnerable to the DROWN attack. Grade set to F. [MORE INFO](https://blog.qualys.com/securitylabs/2016/03/04/ssl-labs-drown-test-implementation-details) |
|<font id=15 color=red>F</font>|This server is vulnerable to MITM attacks because it supports [insecure renegotiation](https://community.qualys.com/blogs/securitylabs/2009/11/05/ssl-and-tls-authentication-gap-vulnerability-discovered). Grade set to F. |
|<font id=16 color=red>F</font>|This server is vulnerable to the [Heartbleed attack](https://community.qualys.com/blogs/securitylabs/2014/04/08/ssl-labs-test-for-the-heartbleed-attack). Grade set to F. |
|<font id=17 color=red>F</font>|This server is vulnerable to the [OpenSSL CCS vulnerability (CVE-2014-0224)](https://community.qualys.com/blogs/securitylabs/2014/06/13/ssl-pulse-49-vulnerable-to-cve-2014-0224-14-exploitable) and exploitable. Grade set to F. |
|<font id=22 color=red>F</font>|This server is vulnerable to the [OpenSSL Padding Oracle vulnerability (CVE-2016-2107)](https://blog.cloudflare.com/yet-another-padding-oracle-in-openssl-cbc-ciphersuites/) and insecure. Grade set to F.|
|<font id=18 color=red>F</font>|This server is vulnerable to the POODLE TLS attack. Patching required. Grade set to F. [MORE INFO](https://community.qualys.com/blogs/securitylabs/2014/12/08/poodle-bites-tls) |
|<font id=19 color=red>F</font>|This server supports 512-bit export suites and might be vulnerable to the FREAK attack. Grade set to F. [MORE INFO](https://freakattack.com) |
|<font id=20 color=red>F</font>|This server supports anonymous (insecure) suites (see below for details). Grade set to F. |
|<font id=21 color=red>F</font>|This server supports insecure Diffie-Hellman (DH) key exchange parameters (Logjam). Grade set to F. [MORE INFO](https://weakdh.org) |
|<font id=22 color=red>F</font>|This server supports SSL 2, which is obsolete and insecure, and can be used against TLS (DROWN attack). Grade set to F. [MORE INFO](https://blog.qualys.com/securitylabs/2016/03/04/ssl-labs-drown-test-implementation-details) |
|<font id=23 color=red>T</font>|This server's certificate is not trusted, see [below](#whyNotTrusted) for details. |

#Q&A
__Q. メッセージはこれで全部か。__
A. わかりません。あくまで私が見つけたものの一覧なので、抜け漏れはあるかもしれません。

__Q. この一覧は最新か。__
A. これは、2016年4月～2017年1月くらいの間に私が見つけたものの一覧です。現在は廃止、変更された項目もあるかもしれません。

以上！幸運を祈る。