{
 "metric": "tls-legacy",
 "segment": "pt",
 "anchor": "domain",
 "label": "Portugal (domains)",
 "population": "domains in Portugal",
 "states": [
  "modern_only",
  "legacy_enabled"
 ],
 "quiet_failure_states": [
  "legacy_enabled"
 ],
 "measurement": "Tier 2, via the DomainAPI TLS endpoint, which tests each protocol version explicitly. Denominator: `has_web`.",
 "why_it_matters": "Supporting a deprecated protocol version is invisible from the browser — the site loads over TLS 1.3 and looks modern — while the server remains willing to downgrade for anything that asks.",
 "limits": "Must be measured server-side. A modern client cannot detect this, because its own OpenSSL refuses to *offer* TLS 1.0/1.1.",
 "data_tier": "tls",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-13",
  "n": 256,
  "qf_pct": 21.88,
  "ci": [
   17.25,
   27.33
  ],
  "dist": {
   "modern_only": 78.12,
   "legacy_enabled": 21.88
  },
  "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
 },
 "series": [
  {
   "day": "2026-08-06",
   "n": 255,
   "qf_pct": 21.96,
   "ci": [
    17.32,
    27.44
   ],
   "dist": {
    "modern_only": 78.04,
    "legacy_enabled": 21.96
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  },
  {
   "day": "2026-08-13",
   "n": 256,
   "qf_pct": 21.88,
   "ci": [
    17.25,
    27.33
   ],
   "dist": {
    "modern_only": 78.12,
    "legacy_enabled": 21.88
   },
   "snapshot": "common-crawl-domain-stratified-c400-g2500-seed20260729"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/tls-legacy/pt"
}