<div dir="ltr"><div>Are we talking about c2s, s2s or both?<br><br></div><div>I'm loving watching the results on <a href="http://xmpp.net/list.php">http://xmpp.net/list.php</a> and noticing sites improving their security.<br>
<br></div><div>What I'd still like is a rolling security average. Something like <br><br></div><div>- average result in last 24 hours, 7 days, 30 days, year. (/me goes to log a feature request).<br><br>S.<br><br></div>
</div><div class="gmail_extra"><br><br><div class="gmail_quote">On 15 November 2013 03:33, Peter Saint-Andre <span dir="ltr"><<a href="mailto:stpeter@stpeter.im" target="_blank">stpeter@stpeter.im</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">-----BEGIN PGP SIGNED MESSAGE-----<br>
Hash: SHA1<br>
<br>
Matthew Wild has run some analytics on SSL/TLS versions negotiated<br>
over a period of time at the <a href="http://jabber.org" target="_blank">jabber.org</a> XMPP service. The percentages<br>
were roughly as follows:<br>
<br>
TLS 1.0 72%<br>
TLS 1.2 21%<br>
TLS 1.1  4%<br>
SSLv3    3%<br>
<br>
Two points:<br>
<br>
1. I'm disappointed that TLS 1.2 is still only ~20%. But that might be<br>
driven by operating systems, not XMPP clients.<br>
<br>
2. I wonder if some XMPP clients still cannot do TLS and therefore use<br>
SSLv3 instead. Or is that too driven by operating systems?<br>
<br>
Peter<br>
<br>
- --<br>
Peter Saint-Andre<br>
<a href="https://stpeter.im/" target="_blank">https://stpeter.im/</a><br>
<br>
<br>
-----BEGIN PGP SIGNATURE-----<br>
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)<br>
Comment: GPGTools - <a href="http://gpgtools.org" target="_blank">http://gpgtools.org</a><br>
Comment: Using GnuPG with Thunderbird - <a href="http://www.enigmail.net/" target="_blank">http://www.enigmail.net/</a><br>
<br>
iQIcBAEBAgAGBQJShYfuAAoJEOoGpJErxa2pWh4QAJdScDfG4DfOL0eVq8J0czAG<br>
XKBRCIf4XFGrr81FAdBgSBWTlzRJQe996SUtJxHKyOlPS1BAoVk0bwBf7nIOHBgI<br>
ydA8zuqcy0WcNk3xri6UnjMawAmIiN5qgp5EI733ioX6LP05tbkuV9Ft0d93atfV<br>
s3iD5xFvoIvnx536l1nSVDW8G+t3tBH3THReWohmqjh6s3vmLyJSgBSahOxlkQbQ<br>
anYbQCCewIcshX0HClZnaHdskYsvc2GmAV5tUJXTZTB+j3tY3fleqjjp9quuw5i+<br>
ei1sA609I7tFDmAhhDLIzrP75Ltn5w4DG/zOWs5YdGAGk0X8RnGLPTW7jyGQNdIv<br>
c09KgN4N+z8g7mxBHvnUNvHdet0lRvfDt3oIEuEVOfecO3zCYGpjLj7Uo7H5KFlp<br>
xKsIqyrbp1lW9zZXFRX/Nb1GxaH1jNVaMwVJfOj0OTz3x+s5yarmy4Atd24I9vlv<br>
0DmuSJYOEs7GLdBMwaDAnolRaaXKjYqd3X8u5VCJfy3xq6LIFLVVAAo+4BXU5Wo+<br>
oMtvt1kYyrIGR5vPXfj4ElBFgQ/oYfO6n8pXBsZClNi5zYJ2mxtQfsaLQ4PnjMnp<br>
a1GQJktkKSTJ1oFhKS09S5C6SVUd8sy41MwE2pXL+KLny8n2GHiHnjVi4NRFz66w<br>
TxRvUb9eT86eYYUaj1N7<br>
=EfuX<br>
-----END PGP SIGNATURE-----<br>
_______________________________________________<br>
JDev mailing list<br>
Info: <a href="http://mail.jabber.org/mailman/listinfo/jdev" target="_blank">http://mail.jabber.org/mailman/listinfo/jdev</a><br>
Unsubscribe: <a href="mailto:JDev-unsubscribe@jabber.org">JDev-unsubscribe@jabber.org</a><br>
_______________________________________________<br>
</blockquote></div><br><br clear="all"><br>-- <br>Simon Tennant | <a href="http://buddycloud.com" target="_blank">buddycloud.com</a> | +49 17 8545 0880 | office hours: <a href="http://goo.gl/tQgxP" target="_blank">goo.gl/tQgxP</a>
</div>