9ijdPuvp

Seems they are following the nigerian price playbook - buying customers not technology. The worse the tech is, the better are the customers still using it. And divesting suse when they realized it has enduring value.

"research has shown that roughly 1% of TLS traffic in 2012 was susceptible".

I don't think this is right. Researchers showed that 1%ish of keys they found on the internet are bad, not that 1% of traffic is susceptible.

From having studied this in a large enterprise setting more recently, there is in fact a really high prevalence of junk keys but much of it is concentrated in self signed certs and other garbage. Voip devices, printers, and management cards. Roca, internet of shit etc. The last big issue that hit the a high proportion of traffic was maybe the debian debacle from 2008.

Now, is this better or worse you decide, but it is a different claim.

The keys that do the vast bulk of traffic generally come from respectable implementations.