http1.dev HTTP/1.x must die

About

Is this a replacement for SSL Labs?

No. Run ssllabs.com first and follow its TLS, certificate, and cipher advice. Then use http1.dev to quickly spot HTTP/1.x-only frontends that are worth modernising or isolating.

Where is the source code?

The CLI and web UI are open source on GitHub: github.com/RuneStone0/http1.dev.

Got feedback? Found a bug? Open an issue or PR on GitHub and help make this scanner better.

How do I run the CLI?

• Scan a public host: http1 example.com
• JSON output: http1 --json example.com
• Multiple hosts: http1 --targets a.com,b.com --json
• Run the web UI locally: http1 --web 8080

Why is the CLI handy?

You can point it at internal hostnames or IPs from a jump box or laptop on your VPN, so you can grade services that aren't exposed to the public internet.

Tip a coffee?

If this tool helped you deprecate some crusty HTTP/1.x edge boxes, consider buying the author a coffee or starring the project on GitHub.