I am looking for a way to reliably check accepted cipher suites by an Azure App Service. On standard virtual machine I just remote to it and execute PowerShell command:
Get-TlsCipherSuite which provides a list of currently accepted keys or check the system's registry.
I could pen test app service by ssllabs.com however I cross checked their results against results from
Get-TlsCipherSuite for a certain machine and it's not 100% accurate: ssllabs didn't detect suites with Pre Shared Keys.
how to query Azure App Service accepted cipher suite?
how do browsers know which cipher suites are available to it when it tries to go to a given domain?
if that's not obvious out of answers to previous questions why ssllabs doesn't detect suites using PSK?