Thank you, Let`s Encrypt. For the year, TLS penetration in RuNet has tripled
Over the past year, the number of nodes in the .RU domain that support TLS (HTTPS) has tripled . According to statistics from the Domains of Russia project, the number of such nodes has increased from 34,205 to 1,03616 over the year. This is a very large increase.
Experts explain that the massive introduction of HTTPS is associated with the issuance of automatic certificates CloudFlare, as well as the launch of the certification center Let `s Encrypt , which allows you to automatically issue free certificates for web resources.
The overwhelming majority of certificates with a validity period of 6 months are issued by Comodo TC for the CloudFlare cloud service.
Almost all short-term certificates are issued by Let's Encrypt. This organization specifically encourages the use of short-term certificates, which have two important advantages:
- Restriction of damage from compromised keys and incorrectly issued certificates.
- Encourage automation that is needed for HTTPS ease of use.
The top of the rating in June 2016
- COMODO ECC Domain Validation Secure Server CA 2
- Let's Encrypt Authority X3
- GlobalSign Domain Validation CA - SHA256 - G2
- COMODO RSA Domain Validation Secure Server CA
- WoSign CA Free SSL Certificate G2
- StartCom Class 1 DV Server CA
- thawte DV SSL CA - G2
- StartCom Class 1 Primary Intermediate Server CA
- RapidSSL SHA256 CA - G3
Unfortunately, TLS protection covers only 3% of Russian sites, but a threefold increase over the year inspires great optimism. “It is difficult to name any other Internet technology, the penetration of which would show an equally great growth in 2015-16,” writes Netoscope. “For comparison, according to historical data, in May-June 2013, the number of unique valid certificates for .RU names barely exceeded 4,000. In June 2016, this figure is over 83,000, that is, for three years, a twenty-fold increase .”
The methodology of the Domains of Russia project takes into account nodes that have returned a valid SSL certificate that matches by name with the domain addressing this node. Verification is done using TCP and port number 443.
The number of certificates is less than the number of domains in statistics, because a certificate can contain several names: for example, with the www prefix, or the names of “additional” sites belonging to one branched resource: forum.test.ru, blog.test.ru, and t .d
See also:
“ Let's Encrypt go to public beta: HTTPS everywhere, to everyone, from now on and forever for free ”
“ Let's Encrypt: getting a certificate in steps ”
“ Yet another instruction on how to get an Let's Encrypt ssl certificate ”