0

I would like to know some numbers regarding to SSL/TLS handshake fail rate, i.e. what is the percentage of (failed SSL/TLS handshake)/(total SSL/TLS handshake) across the internet. By failure it means that all kinds of possible causes are all included.

I'm looking into related problems so I need data. Is there any sources that imply related statistics? I can't find them.

  • This is an unanswerable opnion-based question. There is no data on what you're asking. – Little Code Jun 15 '16 at 14:10
1

Hard to say.

The most common cause for SSL/TLS handshake failure is an inability to agree upon a common protocol and cipher. Because the protocol/cipher suite presented by the client is going to vary widely from client to client, and the suite supported by the server is going to vary widely from server to server, there's no way to do a real statistical analysis.

There are real numbers available for things like supported protocols and ciphers. Those can be used to infer things like failure rates for older browsers (IE6, Java 6). And then there's actual breakage like Microsoft's ServerKeyExchange problem - quantifiable as the result of an intersection between two pieces of software, but how often to they intersect in the real world? Hard to say, and not measured.

  • 1
    Thank you for your help and links. I've seen similar stats before and your links are useful as well. I also think profile failure rate like I described is difficult. I'm keep looking into it. Thanks – 9f241e21 May 17 '16 at 2:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.