Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

As the title, is SSL version 2 still in use? Or now is used only SSLv3? What is the spread of SSLv3?

share|improve this question
up vote 1 down vote accepted

SSLv2 is still enabled by default on most web server software (Apache, IIS), but should be disabled when security is a concern.

Any modern browser will connect over SSLv3 or TLS when available, but for the most part maintain the ability to fall back to SSLv2 if the server they're connecting to doesn't support a newer protocol.

So, the concise version: it's on its way out, and you're probably safe disabling it unless you have to support really ancient browsers, but it's not yet gone.

share|improve this answer
For what it's worth, we disable SSLv2 on all our webservers as a standard practice, and we've never heard any complaints. – malcolmpdx Mar 22 '11 at 18:30

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.