Necko:SSL v2 Sites

This is a list of websites known to only support SSL v2 - that is, if you turn it off, you get an error message saying that you can't access the site, or any attempt to connect to the site causes a long hang. In order for a site to be added to this list, it should be quickly accessible with SSL v2 enabled, but you should get an error message or a hang with SSL v2 disabled.

We may later attempt to contact and evangelise these sites, but at the moment this is merely a recording exercise.

• https://register.btinternet.com/
• https://ben.mbhs.edu/

Not SSL v2 but low security ciphers (other places to discuss these?):

• http://www.comcastsupport.com/sdcxuser/lachat/user/userchatstart.asp
  • I have disabled SSL v2, all SSL v2 ciphers, everything with less than 128 bits, MD5 and this is the only site in over a year that I have seen that does not work.

Other useful links:

• Gerv's original blog post
• Opera forum post
• Netcraft may have SSL v2 server prevalence info
• SecuritySpace has another survey, although I don't think they have figures for SSL v2 only.