Meets the TLS requirements of PCI DSS 4.0.1 Requirement 4.2.1: conformance by government type

Share of applicable sites whose observable TLS configuration meets every technical requirement, against the all-sites benchmark. Cohorts with at least 100 applicable sites.

all sites = 60.2%federal: 94.7; +34.5pp vs all sites = 60.2% (better); n=531 federal +34.5pplocal: 91.2; +31pp vs all sites = 60.2% (better); n=1055 local +31ppstate: 85; +24.8pp vs all sites = 60.2% (better); n=326 state +24.8ppNot government: 60.1; −0.1pp vs all sites = 60.2% (worse); n=971515 Not government −0.1pp
Better than benchmarkWorse than benchmark

Denominator: applicable sites (requirements the scan cannot observe are excluded) · n per cohort in the table

View as table
govTypeAll requirements metMost-failed requirementn
federal94.7%SSLv3, TLS 1.0, and TLS 1.1 are disabled531
local91.2%SSLv3, TLS 1.0, and TLS 1.1 are disabled1,055
state85%SSLv3, TLS 1.0, and TLS 1.1 are disabled326
Not government60.1%SSLv3, TLS 1.0, and TLS 1.1 are disabled971,515

Source: GeoTrust Research — The State of SSL/TLS, October 2026