feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing#82

Merged

danielewood merged 30 commits intomainfrom

feat/connect-cipher-audit

Feb 28, 2026

Commits on Feb 27, 2026

feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing

danielewood
and
claude
committed
docs: update changelog refs for cipher audit commit

danielewood
and
claude
committed
ci: add go mod update and npm update pre-commit hooks

danielewood
and
claude
committed
build(deps): bump rollup to 4.59.0 and wrangler to 4.20260305.0

danielewood
and
claude
committed
fix: harden QUIC/TLS parsers, address PR review feedback

danielewood
and
claude
committed
docs: update changelog refs from pending to 1adb9b5

danielewood
and
claude
committed
fix: harden QUIC parser, fix CLI error wrapping, consolidate tests

danielewood
and
claude
committed
docs: update changelog refs from pending to 18ed288

danielewood
and
claude
committed
fix: address PR review — rating bug, error strings, test compaction, spinner safety

danielewood
and
claude
committed
fix: address remaining PR review — test coverage, changelog refs, spinner safety

danielewood
and
claude
committed
fix: use slices.Concat, show empty cipher message, strengthen tests

danielewood
and
claude
committed
docs: update changelog refs from pending to 7a155c3

danielewood
and
claude
committed
fix: include QUIC ciphers in overall rating and diagnostics, fix spinner data race

danielewood
and
claude
committed
fix: address review findings — error wrapping, QUIC bounds checks, test hardening

danielewood
and
claude
committed
feat: improve connect diagnostics — hostname mismatch, error-level diagnostics, specific cipher checks

danielewood
and
claude
committed
fix: sort diagnostics — errors first, then alphabetically by check name

danielewood
and
claude
committed
feat: add raw TLS 1.0–1.2 legacy prober for DHE/static-RSA-only servers

danielewood
and
claude
committed
fix: address review findings — fallback timeout, dedup diagnostics, remove dead code

danielewood
and
claude
committed
fix: address PR review comments — error wrapping, lowercase errors, doc fix

danielewood
and
claude
committed
docs: update PR feedback rules — reply, resolve, and minimize

danielewood
and
claude
committed
fix: address PR review comments — error strings, QUIC versions, panic, dup context

danielewood
and
claude
committed
fix: address adversarial review findings — security bounds, UX, test coverage

danielewood
and
claude
committed
docs: update CHANGELOG refs from pending to commit SHAs

danielewood
and
claude
committed
fix: address review findings — lowercase errors, naming, QUIC display, version return

danielewood
and
claude
committed
docs: update changelog pending refs to 6492fa5

danielewood
and
claude
committed
fix: show real verify result for legacy probe — chain is verified, key possession is not

danielewood
and
claude
committed
docs: update changelog pending ref to 772742c

danielewood
and
claude
committed
fix: address review findings — legacy probe OCSP, TLS alert guard, QUIC port

danielewood
and
claude
committed
fix: address review findings — CS-5, T-11, CL-4

danielewood
and
claude
committed

Commits on Feb 28, 2026

fix: address review findings — Stop deadlock, ERR-4/5, CS-5, error context
danielewood
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing#82

feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing#82
danielewood merged 30 commits intomainfrom
feat/connect-cipher-audit

Commits on Feb 27, 2026

feat: add cipher suite enumeration with raw TLS 1.3, QUIC, and key exchange probing

docs: update changelog refs for cipher audit commit

ci: add go mod update and npm update pre-commit hooks

build(deps): bump rollup to 4.59.0 and wrangler to 4.20260305.0

fix: harden QUIC/TLS parsers, address PR review feedback

docs: update changelog refs from pending to 1adb9b5

fix: harden QUIC parser, fix CLI error wrapping, consolidate tests

docs: update changelog refs from pending to 18ed288

fix: address PR review — rating bug, error strings, test compaction, spinner safety

fix: address remaining PR review — test coverage, changelog refs, spinner safety

fix: use slices.Concat, show empty cipher message, strengthen tests

docs: update changelog refs from pending to 7a155c3

fix: include QUIC ciphers in overall rating and diagnostics, fix spinner data race

fix: address review findings — error wrapping, QUIC bounds checks, test hardening

feat: improve connect diagnostics — hostname mismatch, error-level diagnostics, specific cipher checks

fix: sort diagnostics — errors first, then alphabetically by check name

feat: add raw TLS 1.0–1.2 legacy prober for DHE/static-RSA-only servers

fix: address review findings — fallback timeout, dedup diagnostics, remove dead code

fix: address PR review comments — error wrapping, lowercase errors, doc fix

docs: update PR feedback rules — reply, resolve, and minimize

fix: address PR review comments — error strings, QUIC versions, panic, dup context

fix: address adversarial review findings — security bounds, UX, test coverage

docs: update CHANGELOG refs from pending to commit SHAs

fix: address review findings — lowercase errors, naming, QUIC display, version return

docs: update changelog pending refs to 6492fa5

fix: show real verify result for legacy probe — chain is verified, key possession is not

docs: update changelog pending ref to 772742c

fix: address review findings — legacy probe OCSP, TLS alert guard, QUIC port

fix: address review findings — CS-5, T-11, CL-4

Commits on Feb 28, 2026

fix: address review findings — Stop deadlock, ERR-4/5, CS-5, error context