This average grade hides a split - many sites with excellent security and many with rather poor security. Most responding websites now negotiate modern TLS; 34.9% still accept TLS 1.0 (often a deliberate choice to reach older devices). On other measures, though, many websites lag well behind best practices. For example, only 61.3% offer post-quantum key agreement.

Denominator: deep-scanned websites · n = 973,441