chromium/badssl.com

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

3043 stars · 205 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

badssl.com is a hosted collection of test subdomains, each deliberately configured with a broken or unusual TLS/SSL setup (expired certificates, weak ciphers, self-signed certs, mixed content, etc.). It is used to verify how HTTP clients, browsers, and TLS libraries handle bad SSL configurations.

Use cases

• test how my http client handles expired ssl certificates
• verify browser warnings for self-signed certificates
• check tls library behavior against weak cipher suites like rc4
• test mixed content blocking in a browser
• validate hsts upgrade behavior
• regression-test ssl error handling in an application

When to choose

• you need realistic bad TLS endpoints to test client certificate validation
• you are building a browser or http library and want to verify ssl error handling
• you want to check mixed-content or hsts behavior against known-bad configs

When to avoid

• you need a general-purpose TLS testing tool like SSL Labs for auditing your own servers
• you need offline testing without internet access or local hosts setup
• you need fuzzing or penetration testing of your own infrastructure

Facets

service · maturity active

testing security http-server security testing web-development developer-tools browser cross-platform tls ssl https certificate-testing test-subdomains browser-testing web-server docker

Member repositories

For agents

markdown · JSON · MCP: product_card(name="chromium/badssl.com")