u/EveningRegion3373

Ekipo, ja sam DevOps inženjer sa nešto više od 7 godina rada u industriji.

Znam da ovakvih tool-ova ima dosta, ali meni je zatrebao jedan koji može da odradi dosta provera jednim upitom. Volim da kažem da je ovo lightweight tool u odnosu na SSL Shopper i slične koji idu u dubinu. Neke od stvari koje proverava:

- Validnost SSL cert-a
- HTTPS redirekcije
- HSTS
- TLS protokole
- HTTP/3 support
- Security headere

i drugo.
Dostupan je i public API, može se integrisati u pipeline.

Tool je besplatan. Uveo sam i opciju za monitoring koja je besplatna za jedan domen.
Monitoring proverava isključivo ono što je gore navedeno, i javlja ako dođe do promena.
Nije uptime monitor.

Značilo bi mi ako bi neki kolega/koleginica, geek, ili neki security guy (or girl :) ) bacio pogled, dao feedback, šta može da se popravi, šta ne valja i slično.

Tool je sad već star oko 6 meseci, i ima preko 15k proverenih domena.

Ukoliko vas zanima, evo linka: httpsornot.com

Hvala dobri ljudi!

Ćao ekipo, ja sam DevOps inženjer sa nešto više od 7 godina rada u industriji.

Znam da ovakvih tool-ova ima dosta, ali meni je zatrebao jedan koji može da odradi dosta provera jednim upitom. Volim da kažem da je ovo lightweight tool u odnosu na SSL Shopper i slične koji idu u dubinu. Neke od stvari koje proverava:

- Validnost SSL cert-a
- HTTPS redirekcije
- HSTS
- TLS protokole
- HTTP/3 support
- Security headere

i drugo.
Dostupan je i public API, može se integrisati u pipeline.

Tool je besplatan. Uveo sam i opciju za monitoring koja je besplatna za jedan domen.
Monitoring proverava isključivo ono što je gore navedeno, i javlja ako dođe do promena.
Nije uptime monitor.

Značilo bi mi ako bi neki kolega/koleginica, geek, ili neki security guy (or girl :) ) bacio pogled, dao feedback, šta može da se popravi, šta ne valja i slično.

Tool je sad već star oko 6 meseci, i ima preko 15k proverenih domena.

Ukoliko vas zanima, evo linka: httpsornot.com

Hvala dobri ljudi!

As a DevOps engineer, I’m so proud of this one. 🚀

httpsornot.com has been live for about 6 months, and we’ve already checked 15k+ domains. 💻 🤓

What it covers today:
- HTTPS/SSL grade (A+ to F)
- cert validity, issuer, expiry
- HTTP → HTTPS redirects + full redirect chain
- security headers (HSTS, CSP, etc.)
- mixed content
- response times per hop
- HTTP/3 (QUIC) detection
- bulk checks (up to 10)
- shareable report + PDF/JSON export
- domain monitoring with email/Slack/webhook alerts
- Certificate Transparency alerts for newly issued certs
- free public API for CI

Basic check needs no signup. 🔐

Kad sam kupovao stan, meni je terasa baš bila bitan faktor. Odavde vidim dobar deo Beograda. Lepo je i noću da se sedi, mir i tišina.

Idealno i za vrhunski espresso ☕️

Kakva je ovo sexy sreda?
Nikakvi fetiši ili neke bolesne objave.

Gde su oni iz toksičnih veza? Dajte ljudi malo materijala da se divimo

Iako mi često deluje da na Kalemegdan uglavnom idu turisti, ove klupice su mi totalno chill.
Kul pogled, opuštanje.

Malo da neutrališemo neprijatne objave vezane za sexy sredu 😁

Gde reddit ekipa pije vrhunski espresso?
Prepoznajete li poslasticu sa fotke?

Kakav pogled imate iz kanca?
Malo da bustujemo motivaciju ponedeljkom

Kod mene Novobeogradaki asfalt, not too bad

What it does - you enter a domain, in a few seconds you get:

• SSL grade (A+ to F) with the breakdown, and what to fix to reach the next grade
• Cert details + expiry, TLS versions, HTTP→HTTPS redirect chain
• Security headers (HSTS, CSP, etc.), HTTP/2 & HTTP/3, mixed content
• Bulk check up to 10 domains, PDF/JSON export, free public API

No account needed for the checker.

Stack: React + Vite frontend on Cloudflare Pages, Node/Express backend on Railway, Postgres. The checker runs everything server-side (real TLS handshake, header inspection, cert parsing).

I added a paid monitoring tier - accounts (Google/GitHub/magic link, no passwords), Polar for billing, daily cron checks that email you when your grade drops or a header disappears after a deploy. Plus Certificate Transparency monitoring - it reads CT logs and alerts you when any cert gets issued for your domain (catches phishing setups / rogue certs). That last one even surfaces forgotten subdomains you're not monitoring.

Would love feedback on the checker specifically - what's missing, what breaks.

Check it out: httpsornot.com

Trenutno Coco bar.
Totalni krš od splava ali meni extra za chill i odmor.
Na gornjem spratu izuzetan pogled na reku. 😇🙏

The mechanic: you get a denial from an AI system (coverage refused, mortgage rejected, flagged as high-risk by predictive policing), you have limited messages to fight back, and the only thing that works is citing the correct article.

Just added 11 EU AI Act levels - banned practices (emotion recognition at work, social scoring), high-risk AI decisions (credit, hiring, medical triage), and transparency violations.
The Act is mostly in force now and people have no idea what rights they actually have, so wanted to make that tangible.

Interesting build challenge: getting the LLM to stay in character as a stubborn corporate bot while still responding correctly when the player cites Art. 5 or Art. 86.
Too rigid = frustrating, too loose = trivial.

Stack is boring (Node/Express, vanilla JS).
No account needed.

Link: fixai.dev

Meni ovo deluje logično. Izbore ne mogu da dobiju, ni uz svu mašineriju. Mora da se pravi haos.

Očekujem jako toplo leto i fight na ulicama. Ako do izbora dodje, moramo svi da se mobilišemo. 💪

Malo motivacije ponedeljkom 😁

Volite li ovaj deo grad?
Meni je top ovde.
Rano ujutro ili uveče, bas chill. 😇