[5120] in cryptography@c2.net mail archive
Re: Relative use of SSLV3 versus SSLV2
daemon@ATHENA.MIT.EDU (Tom Weinstein)
Fri Jul 16 16:33:16 1999
Date: Fri, 16 Jul 1999 11:38:00 -0700
From: Tom Weinstein <tomw@geocast.com>
To: "Marcus J. Ranum" <mjr@nfr.net>
Cc: cryptography@c2.net
"Marcus J. Ranum" wrote:
>
> Does anyone out there have any statistics about usage of
> SSLV3 versus SSLV2? I'm trying to get a feeling for how much
> product support there needs to be for V2 -- is there even
> a significant user base for it anymore? Does anyone keep any
> measures of version usage??
Unfortunately, use of SSL2 is still significant. Anyone using a Netscape
Commerce Server 1.0 still only has SSL2. This includes a number of major
ecommerce sites. I believe that the latest CommerceXpert server from
Netscape/AOL includes SSL3.
Anyone using a new version of Apache/SSL or Netscape Enterprise Server has
SSL3.
When I was at Netscape, we asked Forrester if they had any numbers on this
stuff, and they told us that they weren't tracking it at that time. You might
want to check with them again to see if they've started doing it.
--
What is appropriate for the master is not appropriate| Tom Weinstein
for the novice. You must understand Tao before | tomw@geocast.com
transcending structure. -- The Tao of Programming |
