Sign up ×
Information Security Stack Exchange is a question and answer site for information security professionals. It's 100% free, no registration required.

At the time the Cloudflare blog post “ECDSA: The digital signature algorithm of a better internet” was authored, Cloudflare was apparently one of "fewer than fifty" users of ECDSA certificates on the web. It seems they have since stopped (via test).

I briefly surveyed several other major web properties using that tool (Google, Yahoo, Microsoft, Facebook, Amazon, Tumblr). Only Google seems to offer an EC key and ECDSA suites.

When I test locally, though (with cipherscan or openssl s_client -connect -cipher ECDHE-ECDSA-AES256-GCM-SHA384), I seem unable to handshake ("no peer certificate available").

Is anyone able to connect to Google (or another popular site) using an ECDSA ciphersuite?

share|improve this question

migrated from May 23 '14 at 13:44

This question came from our site for software developers, mathematicians and others interested in cryptography.

Chrome uses ECDSA for gmail – CodesInChaos May 22 '14 at 16:34

2 Answers 2


They have deployed both ECDSA and RSA certs.

See SSL Labs report

Update 2015-11-10

About 7% ECDSA support.

Hubert Kario of RedHat Security scans (used to scan?) the Alexa Top 1 Million sites using the cipherscan tool. This is the relevant table from his 2015-06 scan:

Certificate sig alg       Count     Percent 
None                      18593     3.7038   
ecdsa-with-SHA256         33851     6.7433   
sha1WithRSAEncryption     147349    29.3529  
sha256WithRSAEncryption   320910    63.9273  
sha384WithRSAEncryption   4         0.0008   
sha512WithRSAEncryption   9         0.0018   

Alexa Top 10: 5/5 split

Here's a snapshot of the Alexa Top 10.

  1. Yes.
  2. Yes.
  3. Yes.
  4. No.
  5. No.
  6. No.
  7. Yes.
  8. No. No SSL/TLS at all
  9. No.
  10. Yes.
share|improve this answer

Besides Couldflare also Wikipedia supports it since it supports HTTPS by default. And do not forget They also support TLS_ECDHE_ECDSA.

BTW here are some statistic about the ciphers used by Wikipedia (and its users):

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.