Fwd: Intent to unship: TLS 1.0 and TLS 1.1

Rob Lemley rob at thunderbird.net
Fri Sep 13 20:01:33 UTC 2019


I was able to pull some info from Censys:

*
* 	*SMTP_tls 25* 	*SMTPS 465* 	*SMTPS 587* 	*POP3_tls 110* 	*POP3S 995*
*IMAP_tls 143* 	*IMAPS 993*
*TLSv1.2* 	2942702 	91.23% 	3461550 	94.23% 	3519800 	95.61% 	3506308
92.08% 	3744681 	92.12% 	3638533 	91.94% 	3869287 	92.64%
*TLSv1.1* 	1281 	0.04% 	1156 	0.03% 	884 	0.02% 	3947 	0.10% 	3783
0.09% 	4200 	0.11% 	4423 	0.11%
*TLSv1.0* 	281350 	8.72% 	210521 	5.73% 	160651 	4.36% 	297628 	7.82%
315010 	7.75% 	314582 	7.95% 	300889 	7.20%
*SSLv3.0* 	401 	0.01% 	304 	0.01% 	25 	0.00% 	74 	0.00% 	1675 	0.04%
216 	0.01% 	2049 	0.05%
*
* 	*3225734* 	*
* 	*3673531* 	*
* 	*3681360* 	*
* 	*3807957* 	*
* 	*4065149* 	*
* 	*3957531* 	*
* 	*4176648* 	*
*


I think a server only gets counted once on each port, so a TLSv1.2
server doesn't also show up under TLS1.0 if it supports multiple versions.

On 9/12/19 7:43 PM, Matt Harris wrote:
> On 12-Sep-19 11:34 PM, Kai Engert wrote:
>> On 12.09.19 14:40, Patrick Cloke wrote:
>>> I'm curious what effect this will have on Thunderbird. Do we have any
>>> idea what percentage of SMTP/IMAP/POP servers are using these versions
>>> of TLS?
>> I don't have numbers.
>>
>> My primary concern here is our inadequate communication of errors
>> related to SSL/TLS connectivity to the user.
>>
> /Undoubtedly the biggest issue for users is this sort of failure.  The
> errors do appear in the error console,  but it is so full of rubbish
> that any advice has to start with "clear the console" and it is
> certainly no somewhere I like to point users.  Nothing like a support
> request that starts with a random error console error
>
> Matt
> /
>
> _______________________________________________
> tb-planning mailing list
> tb-planning at mozilla.org
> https://mail.mozilla.org/listinfo/tb-planning

-- 
Rob Lemley
Thunderbird Build Engineer
rob at thunderbird.net - :rjl

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/tb-planning/attachments/20190913/4ed4b946/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0xF0B3DEEB56268743.asc
Type: application/pgp-keys
Size: 3147 bytes
Desc: not available
URL: <http://mail.mozilla.org/pipermail/tb-planning/attachments/20190913/4ed4b946/attachment-0001.bin>


More information about the tb-planning mailing list