Hello, welcome to the Wednesday, September 29, 2021 edition of the Sansanet Storm Center's Stormcast.

My name is Johannes Ulrich, and there I'm recording from Jacksonville, Florida.

Jan today took a look at, well, how much of outdated TLS versions are still out there on the internet, in particular, SL version 2 and 3, but also how many servers have already adopted TLS 1.3.

Turns out globally looks pretty good.

The prevalence of SL version 3, and lore is sort of in the single digit range, but well, that's not true for all countries. There are a couple of countries that really stick out by having still a relatively large percentage of servers that support versions of TLS as far back as

SSL version 2.

And probably somewhat unexpected that the countries that still run a lot of SL version

2 are not necessarily big internet users in the first place.

Tunisia, Kazakhstan, Marshall Islands,

Guam and Gabon are some of the leaders here when it comes to ESL version 2.0. I believe

Kazakhstan also had some legal issues around encryption recently, so this may play a role here as well.

One issue, of course, may also be that some of these countries still have a significant

population of users with older operating systems, like, for example, Windows XP, which

may not support, for example, TLS 1.2 or 1.3.

And in other TLS notes, the Electronic Frontier Foundation announced that it will no longer really support or offer its

HDPS Everywhere extension because, well, it has sort of become redundant

because that's now the default behavior of many browsers or browsers can easily be adjusted

to by default upgrade to HDPS. So no more need for this extension. And talking about browser add-ons, apparently for the last seven months,

browser add-on was available on Mozilla's website.

So this was Firefox ad-in, claiming to be a SafePol application.

SafePol is a wallet that's available for Apple and Google Play as a native application.

Apparently, there is no official browser extension associated with it,

...