I am working on a vulnerability scanner in Java to check for websites that allow connections using weak cipher suites. So I would, for example, try to connect using 56 bits ...
How do we check the Cipher strength of the Https connection and verify whether it is a 128-bit encryption? I tried getting the ExtendedBrowserInfo (from BrowserHawk) and calling the method getSslKeySize() ,it returns -1. Is there any request Header indicating the same? If anybody could send a sample piece of code , it would be helpful