Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

As the title, is SSL version 2 still in use? Or now is used only SSLv3? What is the spread of SSLv3?

share|improve this question

1 Answer 1

up vote 1 down vote accepted

SSLv2 is still enabled by default on most web server software (Apache, IIS), but should be disabled when security is a concern.

Any modern browser will connect over SSLv3 or TLS when available, but for the most part maintain the ability to fall back to SSLv2 if the server they're connecting to doesn't support a newer protocol.

So, the concise version: it's on its way out, and you're probably safe disabling it unless you have to support really ancient browsers, but it's not yet gone.

share|improve this answer
2  
For what it's worth, we disable SSLv2 on all our webservers as a standard practice, and we've never heard any complaints. –  malcolmpdx Mar 22 '11 at 18:30

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.