{
 "metric": "weak-crypto",
 "segment": "fr-companies",
 "anchor": "company",
 "label": "France companies",
 "population": "France companies",
 "states": [
  "strong",
  "weak"
 ],
 "quiet_failure_states": [
  "weak"
 ],
 "measurement": "Tier 2; key type and size, plus signature algorithm. Denominator: `has_web`.",
 "why_it_matters": "The \"not everything is broken\" control — a near-solved problem, published because a dispassionate source reports the good news too.",
 "limits": "**the rule must key on the algorithm, not the number.** `< 2048 bits` is weak only for **RSA**; EC keys are strong at 256/384/521 bits, and the `signature_algorithm` field describes the *issuer's* signature, not the subject key. Getting this wrong produced a false 30% weak rate before it was fixed — the canonical example of a wrong-rule bug in this project.",
 "data_tier": "tls",
 "population_predicate": "has_web",
 "entity_type": "domain",
 "kind": "failure",
 "latest": {
  "day": "2026-08-12",
  "n": 545,
  "qf_pct": 0.73,
  "ci": [
   0.29,
   1.87
  ],
  "dist": {
   "strong": 99.27,
   "weak": 0.73
  },
  "snapshot": "sirene-france-per600-seed20260730"
 },
 "series": [
  {
   "day": "2026-08-05",
   "n": 545,
   "qf_pct": 0.73,
   "ci": [
    0.29,
    1.87
   ],
   "dist": {
    "strong": 99.27,
    "weak": 0.73
   },
   "snapshot": "sirene-france-per600-seed20260730"
  },
  {
   "day": "2026-08-12",
   "n": 545,
   "qf_pct": 0.73,
   "ci": [
    0.29,
    1.87
   ],
   "dist": {
    "strong": 99.27,
    "weak": 0.73
   },
   "snapshot": "sirene-france-per600-seed20260730"
  }
 ],
 "license": "CC BY 4.0",
 "source": "https://quietfailures.com/datasets/weak-crypto/fr-companies"
}