Check if your browser is vulnerable to the Apple SSL bug

In plain words

This website tests whether a user's browser is vulnerable to the Apple SSL security flaw discovered in 2014. The tool examines the visitor's operating system and browser version, then attempts to verify if the vulnerability has been patched. It works by sending an invalid cryptographic message to see if the browser correctly rejects it. The test requires JavaScript to be enabled and provides immediate feedback on whether the system is protected against this specific SSL/TLS vulnerability.

written from the facts on this page · September 2026

From the sources

If this message remains here for more than sixty seconds, make sure you have javascript enabled and reload the page. We have examined your OS and browser version information and determined that an active vulnerability test was appropriate. Fortunately, your browser correctly aborted loading our test image upon seeing an invalid ServerKeyExchange message. We have examined your OS and browser version information and determined that an active vulnerability test was appropriate. Unfortunately, we are unable to provide accurate results, probably due to a problem with our server. Try again later. We have examined your OS and browser version information and determined that an active vulnerability…from gotofail.com

• TT
  Tricking the user to access history using CSS and captchas2014 · frantzmiccoli.github.io · ▲140
• 
  SSL Montior2023 · ▲77

  Free SSL monitoring app for macOS

• 
  SSL Checker Tool2019 · magenticians.com · ▲84

  Free way to identify SSL configuration issues

• 
  SSLreminder2021 · sslreminder.pro · ▲78

  Keep the business running, get reminded to extend your SSL

• 
  Signed Pages2018 · github.com · ▲75

  A browser extension to verify the authenticity of websites

• 
  Browser-based XSS scanner2024 · github.com · ▲57

  This is a simple single-file python program that can find basic XSS (cross-site scripting) vulnerabilities in a target url. Most XSS discovery tools use a payload refelection strategy in which payloads are injected in url parameters and the GET response is inspected for places where the payload content is reflected. This is a very low precision XSS detection strategy because most reflection does not support execution. This program uses a different approach, and instead opens the target url in a browser, tests alert(...) payloads directly in the browser context, and listens for an alert being…

• 
  SimCity, but with Permits▲930

  A free city-building game in your browser. You are the mayor. You know what the city needs. Now get it past the zoning board, the neighbors, the appeals court and the next election.

  Life & fun · 2d ago · permit.petercai.com

• IV
  I've been paying for a rural Tanzanian's education for 10 years▲778

  Life & fun · 15d ago · tanzaniaeducationproject.org

• 
  Bigwords.page – Turn any screen into a sign. The URL is the app▲728

  Turn a phone, tablet or TV into a sign. Type a message and it fills the screen: welcome signs, timers, Wi-Fi passwords and more. No app, no account, free.

  Life & fun · 16d ago · bigwords.page

• 
  Guitoro, a virtual guitar you strum with your keyboard▲573

  Play a free virtual guitar online with your keyboard or by touch. Slow songs down and see every chord, string and strum. Acoustic, classic, electric and bass.

  Life & fun · 9d ago · guitoro.com

• 
  See *almost* any carriers phone settings▲432

  Carrier settings from iPhone, Pixel and Galaxy firmware, decoded and compared: APNs, VoLTE, 5G and Wi-Fi Calling per carrier, and what each build changed.

  Life & fun · 13d ago · carrierexplode.com

• 
  The whole Solar System and every tracked satellite, live in the browser▲407

  Life & fun · 23d ago · space.bl2.net

• 
  Recordit▲564

  A faster way to take screencasts Free + GIF Support

  Life & fun · 2014 · placeit.net

• 
  thedaywefightback.js▲472

  Add a banner to your site in opposition to mass surveillance on 02/11 - tfrce/thedaywefightback.js

  Life & fun · 2014 · github.com

• 
  OneTab▲458

  Save 95% memory by converting all your open tabs into a list

  Work · 2014 · one-tab.com

• JL
  JS library to make your website instant▲426

  http://instantclick.io/ It seems the internet architecture won't bring us instant websites anytime soon. So here is a hack. I released this JS library last month (today is version 2.0 release, fixing v1.0's rough edges), it makes use of HTML5's pushState and preloading to make a website instant. It works like this: before clicking on a link, you'll hover over it. And there's a delay of 200-300 ms between these two events. InstantClick uses this delay to preload a page, when you click on a link it will display instantly in most case. (You can test on the website.) That's…

  Life & fun · 2014

• IR
  I redesigned the Microsoft employee badge▲322

  For a while, I had this idea of redesigning Microsoft employee badges for a modern and neat look. So I spared a few hours this weekend. It’s over a year Microsoft has started to rebrand itself, starting from its logo to a brand new looking OS, from campus shuttles to direction signs on the cam

  Life & fun · 2014 · alp.im

• 
  Hemingway▲320

  Hemingway makes your writing bold and clear.

  Life & fun · 2014 · hemingwayapp.com