1

I would like to know some numbers regarding to SSL/TLS handshake fail rate, i.e. what is the percentage of (failed SSL/TLS handshake)/(total SSL/TLS handshake) across the internet. By failure it means that all kinds of possible causes are all included.

I'm looking into related problems so I need data. Is there any sources that imply related statistics? I can't find them.

Improve this question
1
  • This is an unanswerable opnion-based question. There is no data on what you're asking.
    – Little Code
    Jun 15, 2016 at 14:10

1 Answer 1

Reset to default
1

Hard to say.

The most common cause for SSL/TLS handshake failure is an inability to agree upon a common protocol and cipher. Because the protocol/cipher suite presented by the client is going to vary widely from client to client, and the suite supported by the server is going to vary widely from server to server, there's no way to do a real statistical analysis.

There are real numbers available for things like supported protocols and ciphers. Those can be used to infer things like failure rates for older browsers (IE6, Java 6). And then there's actual breakage like Microsoft's ServerKeyExchange problem - quantifiable as the result of an intersection between two pieces of software, but how often to they intersect in the real world? Hard to say, and not measured.

Improve this answer
1
  • 1
    Thank you for your help and links. I've seen similar stats before and your links are useful as well. I also think profile failure rate like I described is difficult. I'm keep looking into it. Thanks
    – 9f241e21
    May 17, 2016 at 2:20

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .