[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-talk] New SSLv3 attack: Turn off SSLv3 in your TorBrowser

> Someone somewhere (I think Mike Perry quoting AGL) mentioned today that
> we'd only be
> breaking 0.3% of the internet if we do this.

My fact checker 9000 looked into this[1]. the 0.3% is probably close but
here are a few stats per Zmap and Alexa

- of the top 1 Million domains, 0.02% have SSLv3 as their highest version
(verified domains)
- of the entire ipv4 space, 2.8% use SSLv3 as their highest version
(unverified certificates)

[1]. https://zmap.io/sslv3/

tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to