Necko:SSL v2 Sites: Difference between revisions
Jump to navigation
Jump to search
(Remove 1&1 sites, as they have now upgraded) |
No edit summary |
||
| Line 3: | Line 3: | ||
We may later attempt to contact and evangelise these sites, but at the moment this is merely a recording exercise. | We may later attempt to contact and evangelise these sites, but at the moment this is merely a recording exercise. | ||
* [https://register.btinternet.com/ https://register.btinternet.com/] | * [https://register.btinternet.com/ https://register.btinternet.com/] | ||
Revision as of 04:05, 30 August 2005
This is a list of websites known to only support SSL v2 - that is, if you turn it off, you get an error message saying that you can't access the site, or any attempt to connect to the site causes a long hang. In order for a site to be added to this list, it should be quickly accessible with SSL v2 enabled, but you should get an error message or a hang with SSL v2 disabled.
We may later attempt to contact and evangelise these sites, but at the moment this is merely a recording exercise.
Not SSL v2 but low security ciphers (other places to discuss these?):
- http://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp
- I have disabled SSL v2, all SSL v2 ciphers, everything with less than 128 bits, MD5 and this is the only site in over a year that I have seen that does not work.
Other useful links:
- Gerv's original blog post
- Opera forum post
- Netcraft may have SSL v2 server prevalence info
- SecuritySpace has another survey, although I don't think they have figures for SSL v2 only.