[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] New SSLv3 attack: Turn off SSLv3 in your TorBrowser



AntiTree transcribed 0.6K bytes:
> >
> > Someone somewhere (I think Mike Perry quoting AGL) mentioned today that
> > we'd only be
> > breaking 0.3% of the internet if we do this.
> >
> 
> My fact checker 9000 looked into this[1]. the 0.3% is probably close but
> here are a few stats per Zmap and Alexa
> 
> - of the top 1 Million domains, 0.02% have SSLv3 as their highest version
> (verified domains)
> - of the entire ipv4 space, 2.8% use SSLv3 as their highest version
> (unverified certificates)
> 
> [1]. https://zmap.io/sslv3/

Neat. Those stats on SSL/TLS deployment are interesting... thanks! :)

-- 
 ââ isis agora lovecruft
_________________________________________________________
OpenPGP: 4096R/0A6A58A14B5946ABDE18E207A3ADB67A2CDB8B35
Current Keys: https://blog.patternsinthevoid.net/isis.txt

Attachment: signature.asc
Description: Digital signature

-- 
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk