Outdated cryptographic protocols put vast amounts of network traffic at risk

2023-11-07 04:00

Examining more than 200 terabytes of network traffic - or the total sum of all packets, for all connections, between all pairs - up to 80% was found to have some defeatable flaw in its encryption and 61% of the traffic unencrypted.

Persistent use of outdated cryptographic protocols raises concerns.

Old, outdated cryptographic protocols TLS 1.0 and SSL v3 are still in wide use today with industries like healthcare and higher education slow to change.

More alarming still, up to 92% of all traffic on a hospital network uses no encryption at all.

87% of encrypted, host-to-host relationships still use TLS 1.2, demonstrating that a large migration to TLS 1.3 is still forthcoming - not a trivial upgrade given the significant differences between versions.

Industries, such as healthcare, have a significant long tail of TLS 1.1 and 1.0 usage, even SSL v3 can be found at scarily high volumes.

News URL

https://www.helpnetsecurity.com/2023/11/07/outdated-cryptographic-protocols/