Re: E-Mail Protocol Security Measurements

Hi Michael,

Michael Richardson wrote:
> RC4 is supported by 83% of end points that support crypto, or of 83% of
> end points that answer TCP?
This percentage is based on hosts that did complete a SSL/TLS handshake.

> I didn't see the total number of hosts scanned in the slides.
The number fluctuates from scan to scan (also our blacklist grows
slowly, but surely -- admins that wish their host or range to be excluded).

For the RC4 specific results:

        Supports RC4 | Does not Support RC4 |Total
SMTPS   2346023         505575          2851598
SMTP    1343406         213882          1557288
IMAPS   3373919         673466          4047385
IMAP    654987          109224          764211
POP3S   3303738         641314          3945052
POP3    3035752         473240          3508992

Our initial scans were based on Hosts collected by UMichigan (dataset:
3d2hbz9r9kh2fbrk-zgrab-results-25-smtp-starttls-full_ipv4-20150413T040703.json)
- We've since gone on to do our own IPv4 wide discovery scans (which
also include banners and X.509 data).

Aaron

signature.asc
Description: OpenPGP digital signature