DNS, SSL/TLS, HTTP and HTML results for debian.org

DNS Report

DNSSEC                 offered (OK)
Zone transfer (AXFR)   not allowed (OK)
CAA Record             offered (OK)
SPF Record             not offered
DMARC Record           not offered
MTA-STS                not offered
TLSRPT Record          not offered

Raw DNS Records

Name	TTL	Type	Data
debian.org	3600	SOA	denis.debian.org hostmaster @ debian.org 2019102772 1800 600 1814400 600
debian.org	28800	NS	dns4.easydns.info, IPv4: 64.68.197.10, IPv6: 2620:49:4:0:0:0:0:10
debian.org	28800	NS	nsp.dnsnode.net, IPv4: 194.58.198.32, IPv6: 2a01:3f1:3032:0:0:0:0:53
debian.org	28800	NS	sec1.rcode0.net, IPv4: 192.174.68.100, IPv6: 2001:67c:1bc:0:0:0:0:100
debian.org	28800	NS	sec2.rcode0.net, IPv4: 176.97.158.100, IPv6: 2001:67c:10b8:0:0:0:0:100
debian.org	300	A	130.89.148.77
debian.org	300	A	128.31.0.62
debian.org	300	A	149.20.4.15
debian.org	300	AAAA	2001:4f8:1:c:0:0:0:15
debian.org	300	AAAA	2001:67c:2564:a119:0:0:0:77
debian.org	300	AAAA	2603:400a:ffff:bb8:0:0:801f:3e
debian.org	28800	CAA	128 issue amazon.com
debian.org	28800	CAA	128 issuewild ;
debian.org	28800	CAA	0 iodef mailto : dsa @ debian.org
debian.org	28800	CAA	128 issue letsencrypt.org
debian.org	28800	MX	0 mailly.debian.org
debian.org	28800	MX	0 muffat.debian.org
debian.org	28800	TXT	google-site-verification=loe-ysjvPgopd0fB1ptQlg6Fy0OppGRCHTAKLZ8BdF4

SSL/TLS Report

 Further IP addresses:   130.89.148.77 149.20.4.15 2603:400a:ffff:bb8::801f:3e
                         2001:4f8:1:c::15 2001:67c:2564:a119::77 
 A record via            supplied IP "128.31.0.62"
 rDNS (128.31.0.62):     --
 Service detected:       HTTP


 SSL/TLS protocols 
 SSLv2      not offered (OK)
 SSLv3      not offered (OK)
 TLS 1      offered
 TLS 1.1    offered
 TLS 1.2    offered (OK)
 TLS 1.3    not offered -- downgraded
 NPN/SPDY   not offered
 ALPN/HTTP2 http/1.1 (offered)

 SSL/TLS server implementation bugs 

 No bugs found.

 Cipher categories 

 NULL ciphers (no encryption)                  not offered (OK) -- NULL:eNULL
 Anonymous NULL Ciphers (no authentication)    not offered (OK) -- aNULL:ADH
 Export ciphers (w/o ADH+NULL)                 not offered (OK) -- EXPORT:!ADH:!NULL
 LOW: 64 Bit + DES encryption (w/o export)     not offered (OK) -- LOW:DES:!ADH:!EXP:!NULL
 Weak 128 Bit ciphers (SEED, IDEA, RC[2,4])    not offered (OK) -- MEDIUM:!aNULL:!AES:!CAMELLIA:!ARIA:!CHACHA20:!3DES
 Triple DES Ciphers (Medium)                   not offered (OK) -- 3DES:!aNULL:!ADH
 High encryption (AES+Camellia, no AEAD)       offered (OK) -- HIGH:!NULL:!aNULL:!DES:!3DES:!AESGCM:!CHACHA20:!AESGCM:!CamelliaGCM:!AESCCM8:!AESCCM
 Strong encryption (AEAD ciphers)              offered (OK) -- AESGCM:CHACHA20:AESGCM:CamelliaGCM:AESCCM8:AESCCM


 Robust (perfect) forward secrecy, (P)FS -- omitting Null Authentication/Encryption, 3DES, RC4 

 PFS is offered (OK)          ECDHE-RSA-AES256-GCM-SHA384 
                              ECDHE-RSA-AES256-SHA384 ECDHE-RSA-AES256-SHA 
                              DHE-RSA-AES256-GCM-SHA384 DHE-RSA-AES256-SHA256 
                              DHE-RSA-AES256-SHA ECDHE-RSA-AES128-GCM-SHA256 
                              ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES128-SHA 
                              DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES128-SHA256 
                              DHE-RSA-AES128-SHA 
 Elliptic curves offered:     sect283k1 sect283r1 sect409k1 sect409r1 sect571k1 
                              sect571r1 secp256k1 prime256v1 secp384r1 
                              secp521r1 brainpoolP256r1 brainpoolP384r1 
                              brainpoolP512r1 


 Server preferences 

 Has server cipher order?     yes (OK)
 Negotiated protocol          TLSv1.2
 Negotiated cipher            ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Cipher order
    TLSv1:     ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA 
               DHE-RSA-AES256-SHA AES128-SHA AES256-SHA 
    TLSv1.1:   ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA 
               DHE-RSA-AES256-SHA AES128-SHA AES256-SHA 
    TLSv1.2:   ECDHE-RSA-AES128-GCM-SHA256 ECDHE-RSA-AES256-GCM-SHA384 
               DHE-RSA-AES128-GCM-SHA256 DHE-RSA-AES256-GCM-SHA384 
               ECDHE-RSA-AES128-SHA256 ECDHE-RSA-AES256-SHA384 
               ECDHE-RSA-AES128-SHA ECDHE-RSA-AES256-SHA DHE-RSA-AES128-SHA256 
               DHE-RSA-AES128-SHA DHE-RSA-AES256-SHA256 DHE-RSA-AES256-SHA 
               AES128-GCM-SHA256 AES256-GCM-SHA384 AES128-SHA256 AES256-SHA256 
               AES128-SHA AES256-SHA 


 Server defaults (Server Hello) 

 TLS extensions (standard)    "server name/#0" "renegotiation info/#65281"
                              "EC point formats/#11" "session ticket/#35"
                              "status request/#5" "heartbeat/#15"
                              "application layer protocol negotiation/#16"
 Session Ticket RFC 5077 hint 300 seconds, session tickets keys seems to be rotated < daily
 SSL Session ID support       yes
 Session Resumption           Tickets: yes, ID: yes
 TLS clock skew               Random values, no fingerprinting possible 
 Signature Algorithm          SHA256 with RSA
 Server key size              RSA 4096 bits
 Server key usage             Digital Signature, Key Encipherment
 Server extended key usage    TLS Web Server Authentication, TLS Web Client Authentication
 Serial / Fingerprints        03B835FB32A06BA4DE47E4781C9E7A83A186 / SHA1 33569A42DB654E9CD7A87EDF92961CF349C91E18
                              SHA256 C9CC7DC80FFD5475274FA06E90132BB7130265046CBE15B581D53ADA74448B68
 Common Name (CN)             debian.org (CN in response to request w/o SNI: www.debian.org)
 subjectAltName (SAN)         debian.org 
 Issuer                       Let's Encrypt Authority X3 (Let's Encrypt from US)
 Trust (hostname)             Ok via SAN and CN (SNI mandatory)
 Chain of trust               Ok   
 EV cert (experimental)       no 
 Certificate Validity (UTC)   87 >= 30 days (2019-10-25 01:00 --> 2020-01-23 01:00)
 # of certificates provided   2
 Certificate Revocation List  --
 OCSP URI                     http://ocsp.int-x3.letsencrypt.org
 OCSP stapling                offered
 OCSP must staple extension   --
 DNS CAA RR (experimental)    available - please check for match with "Issuer" above
                              iodef=mailto:dsa@debian.org, issue=amazon.com,
                              issue=letsencrypt.org, issuewild=;
 Certificate Transparency     yes (certificate extension)


 HTTP header response @ "/" 

 HTTP Status Code             302 Found, redirecting to "https://www.debian.org/"
 HTTP clock skew              +82 sec from localtime
 Strict Transport Security    180 days=15552000 s, just this domain
 Public Key Pinning           --
 Server banner                Apache
 Application banner           --
 Cookie(s)                    (none issued at "/") -- maybe better try target URL of 30x
 Security headers             X-Frame-Options sameorigin
                              X-XSS-Protection 1
                              X-Content-Type-Options nosniff
                              Referrer-Policy no-referrer
 Reverse Proxy banner         --


 SSL/TLS vulnerabilities 

 Heartbleed (CVE-2014-0160)                not vulnerable (OK), timed out
 CCS (CVE-2014-0224)                       not vulnerable (OK)
 Ticketbleed (CVE-2016-9244), experiment.  not vulnerable (OK)
 ROBOT                                     not vulnerable (OK)
 Secure Renegotiation (CVE-2009-3555)      not vulnerable (OK)
 Secure Client-Initiated Renegotiation     not vulnerable (OK)
 CRIME, TLS (CVE-2012-4929)                not vulnerable (OK)
 BREACH (CVE-2013-3587)                    no HTTP compression (OK)  - only supplied "/" tested
 POODLE, SSL (CVE-2014-3566)               not vulnerable (OK)
 TLS_FALLBACK_SCSV (RFC 7507)              Downgrade attack prevention supported (OK)
 SWEET32 (CVE-2016-2183, CVE-2016-6329)    not vulnerable (OK)
 FREAK (CVE-2015-0204)                     not vulnerable (OK)
 DROWN (CVE-2016-0800, CVE-2016-0703)      not vulnerable on this host and port (OK)
                                           make sure you don't use this certificate elsewhere with SSLv2 enabled services
                                           https://censys.io/ipv4?q=C9CC7DC80FFD5475274FA06E90132BB7130265046CBE15B581D53ADA74448B68
                                           could help you to find out
 LOGJAM (CVE-2015-4000), experimental      Common prime with 4096 bits detected: 
                                           RFC3526/Oakley Group 16,
                                           but no DH EXPORT ciphers
 BEAST (CVE-2011-3389)                     TLS1: ECDHE-RSA-AES128-SHA
                                                 ECDHE-RSA-AES256-SHA
                                                 DHE-RSA-AES128-SHA
                                                 DHE-RSA-AES256-SHA AES128-SHA
                                                 AES256-SHA 
                                           VULNERABLE -- but also supports higher protocols  TLSv1.1 TLSv1.2 (likely mitigated)
 LUCKY13 (CVE-2013-0169), experimental     potentially VULNERABLE, uses cipher block chaining (CBC) ciphers with TLS. Check patches
 RC4 (CVE-2013-2566, CVE-2015-2808)        no RC4 ciphers detected (OK)


 Tested 364 ciphers, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9f     DHE-RSA-AES256-GCM-SHA384         DH 4096    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384                
 x6b     DHE-RSA-AES256-SHA256             DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256                
 x39     DHE-RSA-AES256-SHA                DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9e     DHE-RSA-AES128-GCM-SHA256         DH 4096    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256                
 x67     DHE-RSA-AES128-SHA256             DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256                
 x33     DHE-RSA-AES128-SHA                DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       


 Ciphers per protocol, ordered by encryption strength 

Hexcode  Cipher Suite Name (OpenSSL)       KeyExch.   Encryption  Bits     Cipher Suite Name (RFC)
-----------------------------------------------------------------------------------------------------------------------------
TLS 1.3  
TLS 1.2  
 xc030   ECDHE-RSA-AES256-GCM-SHA384       ECDH 256   AESGCM      256      TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384              
 xc028   ECDHE-RSA-AES256-SHA384           ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384              
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x9f     DHE-RSA-AES256-GCM-SHA384         DH 4096    AESGCM      256      TLS_DHE_RSA_WITH_AES_256_GCM_SHA384                
 x6b     DHE-RSA-AES256-SHA256             DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA256                
 x39     DHE-RSA-AES256-SHA                DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x9d     AES256-GCM-SHA384                 RSA        AESGCM      256      TLS_RSA_WITH_AES_256_GCM_SHA384                    
 x3d     AES256-SHA256                     RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA256                    
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc02f   ECDHE-RSA-AES128-GCM-SHA256       ECDH 256   AESGCM      128      TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256              
 xc027   ECDHE-RSA-AES128-SHA256           ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256              
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x9e     DHE-RSA-AES128-GCM-SHA256         DH 4096    AESGCM      128      TLS_DHE_RSA_WITH_AES_128_GCM_SHA256                
 x67     DHE-RSA-AES128-SHA256             DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA256                
 x33     DHE-RSA-AES128-SHA                DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x9c     AES128-GCM-SHA256                 RSA        AESGCM      128      TLS_RSA_WITH_AES_128_GCM_SHA256                    
 x3c     AES128-SHA256                     RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA256                    
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
TLS 1.1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x39     DHE-RSA-AES256-SHA                DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x33     DHE-RSA-AES128-SHA                DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
TLS 1  
 xc014   ECDHE-RSA-AES256-SHA              ECDH 256   AES         256      TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA                 
 x39     DHE-RSA-AES256-SHA                DH 4096    AES         256      TLS_DHE_RSA_WITH_AES_256_CBC_SHA                   
 x35     AES256-SHA                        RSA        AES         256      TLS_RSA_WITH_AES_256_CBC_SHA                       
 xc013   ECDHE-RSA-AES128-SHA              ECDH 256   AES         128      TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA                 
 x33     DHE-RSA-AES128-SHA                DH 4096    AES         128      TLS_DHE_RSA_WITH_AES_128_CBC_SHA                   
 x2f     AES128-SHA                        RSA        AES         128      TLS_RSA_WITH_AES_128_CBC_SHA                       
SSLv3  
SSLv2  

 Client simulations 

 Android 2.3.7                TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 Android 4.0.4                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.1.1                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.2.2                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.3                  TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Android 4.4.2                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 5.0.0                TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 6.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Android 7.0                  TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 27 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 28 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 29 Win 7              TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Chrome 30 Win 7              TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Chrome 31 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 32 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 33 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 34 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 35 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 36 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 37 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 39 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 40 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 42 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 43 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 45 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 47 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 48 OS X               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 49 XP SP3             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 50 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 51 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 57 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 65 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 69 Win 7              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Chrome 70 Win 10             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 10.0.12 ESR Win 7    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 17.0.7 ESR Win 7     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 21 Fedora 19         TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 Firefox 21 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 22 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 24.2.0 ESR Win 7     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 24 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 26 Win 8             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Firefox 27 Win 8             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 29 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 30 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31.3.0 ESR Win 7     TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 31 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 32 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 34 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 35 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 37 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 39 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 41 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 42 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 44 OS X              TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 45 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 46 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 47 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 49 XP SP3            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 53 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 59 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Firefox 62 Win 7             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 6 XP                      No connection
 IE 7 Vista                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8-10 Win 7                TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 Win 7                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 8 XP                      No connection
 IE 9 Win 7                   TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 10 Win Phone 8.0          TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 IE 11 Win 7                  TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 4096 bit DH
 IE 11 Win 8.1                TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 4096 bit DH
 IE 11 Win Phone 8.1          TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 IE 11 Win Phone 8.1 Update   TLSv1.2 DHE-RSA-AES128-GCM-SHA256, 4096 bit DH
 IE 11 Win 10                 TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 IE 11 Win 10 Preview         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 12 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 13 Win Phone 10         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Edge 15 Win 10               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Opera 12.15 Win 7            TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 Opera 15 Win 7               TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Opera 16 Win 7               TLSv1.1 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Opera 17 Win 7               TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 5.1.9 OS X 10.6.8     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 5 iOS 5.1.1           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 6.0.4 OS X 10.8.4     TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Safari 6 iOS 6.0.1           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 7 iOS 7.1             TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 7 OS X 10.9           TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 iOS 8.0 Beta        TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 iOS 8.4             TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 8 OS X 10.10          TLSv1.2 ECDHE-RSA-AES128-SHA256, 256 bit ECDH (P-256)
 Safari 9 iOS 9               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 9 OS X 10.11          TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 iOS 10             TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Safari 10 OS X 10.12         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Tor 17.0.9 Win 7             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Apple ATS 9 iOS 9            TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Baidu Jan 2015               TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 BingBot Dec 2013             TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 BingPreview Dec 2013         TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 BingPreview Jun 2014         TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 BingPreview Jan 2015         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Googlebot Oct 2013           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Jun 2014           TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Googlebot Feb 2015           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Googlebot Feb 2018           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Yahoo Slurp Oct 2013         TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Yahoo Slurp Jun 2014         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Yahoo Slurp Jan 2015         TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 YandexBot 3.0                No connection
 YandexBot May 2014           TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 YandexBot Sep 2014           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 YandexBot Jan 2015           TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 6u45                    No connection
 Java 7u25                    TLSv1.0 ECDHE-RSA-AES128-SHA, 256 bit ECDH (P-256)
 Java 8b132                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u111                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u161                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 8u31                    TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 Java 9.0.4                   TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 0.9.8y               TLSv1.0 DHE-RSA-AES128-SHA, 4096 bit DH
 OpenSSL 1.0.1h               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.1l               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)
 OpenSSL 1.0.2e               TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256, 256 bit ECDH (P-256)

Security HTTP Headers

HTTP Strict Transport Security (HSTS)   offered (OK)
Content Security Policy (CSP)           not offered (NOT ok)
X-Frame-Options                         offered (OK)
X-XSS-Protection                        offered (OK)
X-Content-Type-Options                  offered (OK)
Expect-CT                               not offered
Referrer Policy                         offered (OK)
Feature Policy                          not offered
Web Server Version Disclosure           not offered (OK)
Web Application Disclosure              not offered (OK)
HTTP Public Key Pins (HPKP)             not offered, deprecated

Connection Performance
Keep Alive Connection                   offered (OK)
Content Encoding (Compression)          offered (Gzip) OK, for static pages or if no secrets in the page

Raw HTTP Headers

HTTP/1.1	200 OK
Accept-Ranges	bytes
Cache-Control	max-age=86400
Connection	Keep-Alive
Content-Encoding	gzip
Content-Language	en
Content-Length	4565
Content-Location	index.en.html
Content-Type	text/html
Date	Sun, 27 Oct 2019 20:47:41 GMT
ETag	"3879-595dbf38bba80-gzip"
Expires	Mon, 28 Oct 2019 20:47:41 GMT
Keep-Alive	timeout=5, max=100
Last-Modified	Sun, 27 Oct 2019 03:26:39 GMT
Referrer-Policy	no-referrer
Server	Apache
Strict-Transport-Security	max-age=15552000
TCN	choice
Vary	negotiate,accept-language,Accept-Encoding,cookie
X-Clacks-Overhead	GNU Terry Pratchett
X-Content-Type-Options	nosniff
X-Frame-Options	sameorigin
X-Xss-Protection	1

Cleaned HTML

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN"
"http://www.w3.org/TR/html4/strict.dtd">
<html lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8" />
<title>Debian -- The Universal Operating System</title>
<link rel="author" href="mailto:webmaster@debian.org" />
<meta name="Description" content="Debian is an operating system and a distribution of Free Software. It is maintained and updated through the work of many users who volunteer their time and effort." />
<meta name="Generator" content="WML 2.0.12 (16-Apr-2008)" />
<meta name="Modified" content="2019-10-27 03:26:39" />
<meta name="viewport" content="width=device-width" />
<meta name="mobileoptimized" content="300" />
<meta name="HandheldFriendly" content="true" />
<link rel="alternate" type="application/rss+xml" title="Debian News" href="News/news" />
<link rel="alternate" type="application/rss+xml" title="Debian Project News" href="News/weekly/dwn" />
<link rel="alternate" type="application/rss+xml" title="Debian Security Advisories (titles only)" href="security/dsa" />
<link rel="alternate" type="application/rss+xml" title="Debian Security Advisories (summaries)" href="security/dsa-long" />
<link href="./debhome.css" rel="stylesheet" type="text/css" />
<link href="./debian-en.css" rel="stylesheet" type="text/css" media="all" />
<link rel="shortcut icon" href="favicon.ico" />
<meta name="Keywords" content="debian, GNU, linux, unix, open source, free, DFSG" />
<link rel="search" type="application/opensearchdescription+xml" title="Debian website search" href="./search.en.xml" />
</head>
<body>
<div id="header">
<div id="upperheader">
<div id="logo"><a href="./" title="Debian Home"><img src="./Pics/openlogo-50.png" alt="Debian" width="50" height="61" /></a></div>
<div id="searchbox">
<form name="p" method="get" action="https://search.debian.org/cgi-bin/omega" id="p">
<p><input type="hidden" name="DB" value="en" /> <input name="P" value="" size="27" /> <input type="submit" value="Search" /></p>
</form>
</div>
</div>
<div id="navbar">
<p class="hidecss"><a href="#content">Skip Quicknav</a></p>
<ul>
<li><a href="intro/about">About Debian</a></li>
<li><a href="distrib/">Getting Debian</a></li>
<li><a href="./doc">Documentation</a></li>
<li><a href="./support">Support</a></li>
<li><a href="./devel/">Developers' Corner</a></li>
</ul>
</div>
<p id="breadcrumbs"> </p>
</div>
<div id="content"><span class="download"><a href="https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/debian-10.1.0-amd64-netinst.iso">Download Debian 10.1<em>(64-bit PC Network installer)</em></a></span>
<div id="splash">
<h1>Debian</h1>
</div>
<div id="intro">
<p>Debian is a <a href="intro/free">free</a> operating system (OS) for your computer. An operating system is the set of basic programs and utilities that make your computer run.</p>
<p>Debian provides more than a pure OS: it comes with over 59000 <a href="distrib/packages">packages</a>, precompiled software bundled up in a nice format for easy installation on your machine. <a href="intro/about">Read more...</a></p>
</div>
<div id="hometoc">
<ul id="hometoc-cola">
<li><a href="intro/about">About</a>
<ul>
<li><a href="./social_contract">Social Contract</a></li>
<li><a href="./code_of_conduct">Code of Conduct</a></li>
<li><a href="./intro/free">Free Software</a></li>
<li><a href="./partners/">Partners</a></li>
<li><a href="./donations">Donations</a></li>
<li><a href="./legal">Legal Info</a></li>
<li><a href="./legal/privacy">Data Privacy</a></li>
<li><a href="./contact">Contact Us</a></li>
</ul>
</li>
<li><a href="./intro/help">Help Debian</a></li>
</ul>
<ul id="hometoc-colb">
<li><a href="distrib/">Getting Debian</a>
<ul>
<li><a href="distrib/netinst">Network install</a></li>
<li><a href="./CD/">CD/USB ISO images</a></li>
<li><a href="./CD/vendors/">CD vendors</a></li>
<li><a href="distrib/pre-installed">Pre-installed</a></li>
</ul>
</li>
<li><a href="./blends/">Pure Blends</a></li>
<li><a href="distrib/packages">Debian Packages</a></li>
<li><a href="./devel/">Developers' Corner</a></li>
</ul>
<ul id="hometoc-colc">
<li><a href="./News/">News</a>
<ul>
<li><a href="./News/weekly/">Project News</a></li>
<li><a href="./events/">Events</a></li>
</ul>
</li>
<li><a href="doc/">Documentation</a>
<ul>
<li><a href="./releases/">Release Info</a></li>
<li><a href="./releases/stable/installmanual">Installation manual</a></li>
<li><a href="doc/books">Debian Books</a></li>
<li><a href="https://wiki.debian.org/">Debian Wiki</a></li>
</ul>
</li>
</ul>
<ul id="hometoc-cold">
<li><a href="./support">Support</a>
<ul>
<li><a href="./international/">Debian International</a></li>
<li><a href="./security/">Security Information</a></li>
<li><a href="Bugs/">Bug reports</a></li>
<li><a href="./MailingLists/">Mailing Lists</a></li>
<li><a href="https://lists.debian.org/">Mailing List Archives</a></li>
<li><a href="./ports/">Ports/Architectures</a></li>
</ul>
</li>
</ul>
<ul id="hometoc-cole">
<li><a href="./sitemap">Site map</a></li>
<li><a href="https://search.debian.org/">Search</a></li>
<li><a href="https://bits.debian.org">The Debian Blog</a></li>
<li><a href="https://identi.ca/debian"><img src="Pics/identica.png" alt="follow debian on identi.ca!" width="80" height="15" /></a></li>
<li><a href="https://planet.debian.org"><img src="Pics/planet.png" alt="follow debian on planet.debian.org!" width="80" height="15" /></a></li>
</ul>
</div>
<p class="infobar">The <a href="releases/stable/">latest stable release of Debian</a> is 10.1. The last update to this release was made on September 7th, 2019. Read more about <a href="releases/">available versions of Debian</a>.</p>
<h2>Getting Started</h2>
<p>Please use the navigation bar at the top of this page to access more content.</p>
<p>In addition, users that speak languages other than English may check the <a href="international/">international</a> section, and, people who use systems other than Intel x86 should check the <a href="ports/">ports</a> section.</p>
<hr />
<a class="rss_logo" href="News/news">RSS</a>
<h2>News</h2>
<p><tt>[08 Sep 2019]</tt> <strong><a href="News/2019/20190908">Updated Debian 9: 9.11 released</a></strong><br />
<tt>[07 Sep 2019]</tt> <strong><a href="News/2019/20190907">Updated Debian 10: 10.1 released</a></strong><br />
<tt>[07 Sep 2019]</tt> <strong><a href="News/2019/2019090702">Updated Debian 9: 9.10 released</a></strong><br />
<tt>[27 Jul 2019]</tt> <strong><a href="News/2019/20190727">DebConf19 closes in Curitiba and DebConf20 dates announced</a></strong><br />
<tt>[07 Jul 2019]</tt> <strong><a href="News/2019/20190707">Debian Edu / Skolelinux Buster — a complete Linux solution for your school</a></strong><br />
<tt>[06 Jul 2019]</tt> <strong><a href="News/2019/20190706">Debian 10 <q>buster</q> released</a></strong><br /></p>
<p>For older news items see the <a href="./News/">News Page</a>. If you would like to receive mail whenever new Debian news comes out, subscribe to the <a href="MailingLists/debian-announce">debian-announce mailing list</a>.</p>
<hr />
<a class="rss_logo" href="security/dsa">RSS</a>
<h2>Security Advisories</h2>
<p><tt>[25 Oct 2019]</tt> <strong><a href="security/2019/dsa-4551">DSA-4551 golang-1.11</a></strong> - security update<br />
<tt>[25 Oct 2019]</tt> <strong><a href="security/2019/dsa-4550">DSA-4550 file</a></strong> - security update<br />
<tt>[24 Oct 2019]</tt> <strong><a href="security/2019/dsa-4549">DSA-4549 firefox-esr</a></strong> - security update<br />
<tt>[21 Oct 2019]</tt> <strong><a href="security/2019/dsa-4548">DSA-4548 openjdk-8</a></strong> - security update<br />
<tt>[21 Oct 2019]</tt> <strong><a href="security/2019/dsa-4547">DSA-4547 tcpdump</a></strong> - security update<br />
<tt>[20 Oct 2019]</tt> <strong><a href="security/2019/dsa-4546">DSA-4546 openjdk-11</a></strong> - security update<br />
<tt>[18 Oct 2019]</tt> <strong><a href="security/2019/dsa-4545">DSA-4545 mediawiki</a></strong> - security update<br />
<tt>[16 Oct 2019]</tt> <strong><a href="security/2019/dsa-4544">DSA-4544 unbound</a></strong> - security update<br />
<tt>[14 Oct 2019]</tt> <strong><a href="security/2019/dsa-4543">DSA-4543 sudo</a></strong> - security update<br />
<tt>[06 Oct 2019]</tt> <strong><a href="security/2019/dsa-4542">DSA-4542 jackson-databind</a></strong> - security update<br /></p>
<p>For older security advisories see the <a href="./security/">Security Page</a>. If you would like to receive security advisories as soon as they're announced, subscribe to the <a href="https://lists.debian.org/debian-security-announce/">debian-security-announce mailing list</a>.</p>
<div class="clr"></div>
</div>
<div id="footer">
<hr class="hidecss" />
<div id="pageLang">
<div id="langSelector">This page is also available in the following languages:
<div id="langContainer"><a href="index.ar.html" title="Arabic" hreflang="ar" lang="ar" rel="alternate">عربية (Arabiya)</a> <a href="index.bg.html" title="Bulgarian" hreflang="bg" lang="bg" rel="alternate">Български (Bəlgarski)</a> <a href="index.ca.html" title="Catalan" hreflang="ca" lang="ca" rel="alternate">català</a> <a href="index.cs.html" title="Czech" hreflang="cs" lang="cs" rel="alternate">česky</a> <a href="index.da.html" title="Danish" hreflang="da" lang="da" rel="alternate">dansk</a> <a href="index.de.html" title="German" hreflang="de" lang="de" rel="alternate">Deutsch</a> <a href="index.el.html" title="Greek" hreflang="el" lang="el" rel="alternate">Ελληνικά (Ellinika)</a> <a href="index.es.html" title="Spanish" hreflang="es" lang="es" rel="alternate">español</a> <a href="index.eo.html" title="Esperanto" hreflang="eo" lang="eo" rel="alternate">Esperanto</a> <a href="index.fa.html" title="Persian" hreflang="fa" lang="fa" rel="alternate">فارسی (Farsi)</a> <a href="index.fr.html" title="French" hreflang="fr" lang="fr" rel="alternate">français</a> <a href="index.gl.html" title="Galician" hreflang="gl" lang="gl" rel="alternate">Galego</a> <a href="index.hy.html" title="Armenian" hreflang="hy" lang="hy" rel="alternate">Հայերեն (hayeren)</a> <a href="index.hr.html" title="Croatian" hreflang="hr" lang="hr" rel="alternate">hrvatski</a> <a href="index.id.html" title="Indonesian" hreflang="id" lang="id" rel="alternate">Indonesia</a> <a href="index.it.html" title="Italian" hreflang="it" lang="it" rel="alternate">Italiano</a> <a href="index.he.html" title="Hebrew" hreflang="he" lang="he" rel="alternate">עברית (ivrit)</a> <a href="index.ko.html" title="Korean" hreflang="ko" lang="ko" rel="alternate">한국어 (Korean)</a> <a href="index.lt.html" title="Lithuanian" hreflang="lt" lang="lt" rel="alternate">Lietuvių</a> <a href="index.hu.html" title="Hungarian" hreflang="hu" lang="hu" rel="alternate">magyar</a> <a href="index.nl.html" title="Dutch" hreflang="nl" lang="nl" rel="alternate">Nederlands</a> <a href="index.ja.html" title="Japanese" hreflang="ja" lang="ja" rel="alternate">日本語 (Nihongo)</a> <a href="index.nb.html" title="Norwegian" hreflang="nb" lang="nb" rel="alternate">norsk (bokmål)</a> <a href="index.pl.html" title="Polish" hreflang="pl" lang="pl" rel="alternate">polski</a> <a href="index.pt.html" title="Portuguese" hreflang="pt" lang="pt" rel="alternate">Português</a> <a href="index.ro.html" title="Romanian" hreflang="ro" lang="ro" rel="alternate">română</a> <a href="index.ru.html" title="Russian" hreflang="ru" lang="ru" rel="alternate">Русский (Russkij)</a> <a href="index.sk.html" title="Slovak" hreflang="sk" lang="sk" rel="alternate">slovenčina</a> <a href="index.fi.html" title="Finnish" hreflang="fi" lang="fi" rel="alternate">suomi</a> <a href="index.sv.html" title="Swedish" hreflang="sv" lang="sv" rel="alternate">svenska</a> <a href="index.ta.html" title="Tamil" hreflang="ta" lang="ta" rel="alternate">தமிழ் (Tamil)</a> <a href="index.vi.html" title="Vietnamese" hreflang="vi" lang="vi" rel="alternate">Tiếng Việt</a> <a href="index.tr.html" title="Turkish" hreflang="tr" lang="tr" rel="alternate">Türkçe</a> <a href="index.uk.html" title="Ukrainian" hreflang="uk" lang="uk" rel="alternate">українська (ukrajins'ka)</a> <a href="index.zh-cn.html" title="Chinese (China)" hreflang="zh-CN" lang="zh-CN" rel="alternate">中文(简)</a> <a href="index.zh-hk.html" title="Chinese (Hong Kong)" hreflang="zh-HK" lang="zh-HK" rel="alternate">中文(HK)</a> <a href="index.zh-tw.html" title="Chinese (Taiwan)" hreflang="zh-TW" lang="zh-TW" rel="alternate">中文(繁)</a></div>
How to set <a href="./intro/cn">the default document language</a></div>
</div>
<hr />
<div id="fineprint">
<p>To report a problem with the web site, please e-mail our publicly archived mailing list <a href="mailto:debian-www@lists.debian.org">debian-www@lists.debian.org</a> in English. For other contact information, see the Debian <a href="./contact">contact page</a>. Web site source code is <a href="https://salsa.debian.org/webmaster-team/webwml">available</a>.</p>
<p>Last Modified: Fri, Mar 22 19:25:09 UTC 2019<br />
Last Built: Sun, Oct 27 03:26:39 UTC 2019<br />
Copyright © 1997-2019 <a href="https://www.spi-inc.org/">SPI</a> and others; See <a href="./license" rel="copyright">license terms</a><br />
Debian is a registered <a href="./trademark">trademark</a> of Software in the Public Interest, Inc.</p>
</div>
</div>
</body>
</html>

Warnings Errors and Accessibility

Accessibility Checks:

line 21 column 1 - Access: [6.1.1.1]: style sheets require testing (link).
line 22 column 3 - Access: [6.1.1.1]: style sheets require testing (link).
line 31 column 36 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 31 column 36 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 36 column 1 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 37 column 25 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 37 column 25 - Access: [12.4.1.1]: associate labels explicitly with form controls.
line 38 column 25 - Access: [2.1.1.5]: ensure information not conveyed through color alone (input).
line 63 column 16 - Access: [13.1.1.1]: link text not meaningful.
line 74 column 7 - Access: [13.1.1.1]: link text not meaningful.
line 102 column 7 - Access: [13.1.1.1]: link text not meaningful.
line 133 column 42 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 133 column 42 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 135 column 43 - Access: [2.1.1.1]: ensure information not conveyed through color alone (image).
line 135 column 43 - Access: [1.1.2.1]: <img> missing 'longdesc' and d-link.
line 148 column 33 - Access: [13.1.1.1]: link text not meaningful.
line 150 column 1 - Access: [13.1.1.1]: link text not meaningful.
line 156 column 32 - Access: [13.1.1.3]: link text too long.
line 163 column 1 - Access: [13.1.1.1]: link text not meaningful.
line 194 column 2 - Access: [13.1.1.1]: link text not meaningful.
line 218 column 2 - Access: [13.1.1.1]: link text not meaningful.
line 240 column 2 - Access: [13.1.1.1]: link text not meaningful.
Info: Doctype given is "-//W3C//DTD HTML 4.01//EN"
Info: Document content looks like HTML 4.01 Strict
No warnings or errors were found.

Test DNS, SSL/TLS, HTTP and HTML

Test results for debian.org

DNS Report

SSL/TLS Report

Security HTTP Headers

Cleaned HTML

Warnings Errors and Accessibility