Having looked at the source of a few of the xss plugins and seeing that the required port is 80, I'd like to know why these tests are not run against port 443 as well. If port 80 is not open but 443 is, then it seems like no xss tests are performed. Is this correct? Thanks Ian Masters