A new section, TLS Statistics, has opened on the Russian Domains statistics portal at http://statdom.ru/tld/ru/report/certscount/#36. Network data protection is becoming a major problem, and the appearance of this section on the portal is related to the growing share of encrypted traffic on the Internet. For example, even now about a third of the web traffic passing through the MSK-IX Russian traffic exchange point is protected.
The TLS Statistics section offers information about the total number of websites using the TLS protocol in the Russian domains .RU and .РФ, the distribution of TLS certificates used in the Russian domain space with the breakdown by cryptographic algorithms (SHA-1 and SHA-256 hash algorithms and RSA and ECDSA electronic signature algorithms), expiration date and the length of keys. The section also provides certifying center ratings. Statistics only cover second-level domains.
TLS monitoring makes it possible to track the increase in the number of protected web services. Today, more than 2,000 websites every month start using HTTPS. In addition, data provided in the section make it possible to accurately evaluate the security of web services and the compliance of existing infrastructure with modern information protection standards.
For example, statistics show that the .RU domain is a leader in terms of replacing the obsolete hash algorithm SHA-1 and using elliptic-curve cryptography.
Today, the TLS protocol is the most common online information protection tool. This technology ensures the confidentiality and integrity of information transfer and makes it possible to authenticate connection nodes, guaranteeing their authenticity. SSL certificates linking a network server name and its cryptographic key with electronic signature mechanisms are a key element in the TLS authentication system. A domain name is a network name. Thus, domain names play a critical role in the prevailing Internet security technology, which accounts for the importance of analyzing the status of TLS technology in the majority of top-level domain zones. Analysis of TLS distribution factors points to the possible degree of user data protection in addressable resources in the top-level domain.