Certificate crypto · Taiwan (domains)

What share of domains in Taiwan have a certificate with a weak key or signature (SHA-1 or sub-2048-bit RSA)?

0.79%

0.79% of domains in Taiwan (95% CI 0.14–4.36%), measured across 126 domains on 2026-08-12.

strong: 99.21%weak: 0.79%
strong · 99.21%weak · 0.79%
Trend

Measured every Wednesday since 2026-08-01 — 4 observations to date. Last measured 2026-08-12.

How this is measured

Tier 2; key type and size, plus signature algorithm. Denominator: has_web.

Passive measurement: a single DNS lookup, TLS handshake, or homepage GET per domain. Aggregate-only; no individual company is named. 95% Wilson confidence intervals. Population: domains sampled from the Common Crawl web graph, filtered to those that do email. Parked domains excluded. Snapshot: common-crawl-domain-stratified-c400-g2500-seed20260729.

Licensed CC BY 4.0 — reuse with attribution to Quiet Failures. Download: JSON · CSV.

Why it matters

The "not everything is broken" control — a near-solved problem, published because a dispassionate source reports the good news too.

Limits of this measurement

the rule must key on the algorithm, not the number. < 2048 bits is weak only for RSA; EC keys are strong at 256/384/521 bits, and the signature_algorithm field describes the issuer's signature, not the subject key. Getting this wrong produced a false 30% weak rate before it was fixed — the canonical example of a wrong-rule bug in this project.

The same check, other segments

Show the remaining 64 segments

Share or cite this figure

Reuse is free under CC BY 4.0 — attribution to Quiet Failures is all we ask.

Post on X

Embed this stat

Free to reuse under CC BY 4.0 — the card links back and updates as the data does.

<iframe src="https://quietfailures.com/embed/weak-crypto/tw" width="380" height="210" style="border:0;max-width:100%" loading="lazy" title="What share of domains in Taiwan have a certificate with a weak key or signature (SHA-1 or sub-2048-bit RSA)?"></iframe>