Server Features » TLS Certificate » Unknown CA
TLS certificate status: Unknown CA
Percentage of SSL/TLS servers with certificate status Unknown/non-trusted Certificate Authority. Showing percentages by IRC server software.About this test result: The certificate is signed by an unknown or non-trusted Certificate Authority. This will generate a certificate warning on the IRC client which the user will have to ignore. This is not secure as it allows a Man-in-the-Middle attack.
Note on statistics:
- There is a difference in the gathering of TLS servers between 2017-2019 and 2020-onwards, see SSL/TLS statistics on the data page.
- For certificate validation errors, OpenSSL (s_client) returns a single error only, so only 1 of the errors is picked even though one server cert could have multiple errors.
- However, from 2023 onwards "Expired" is detected even when there are other errors (eg. Unknown CA).
Table
Percentage of SSL/TLS servers with certificate status Unknown/non-trusted Certificate Authority. Showing percentages by IRC server software.| Software | Sep 2017 | Dec 2018 | Dec 2019 | Dec 2020 | Dec 2021 | Dec 2022 | Dec 2023 | Dec 2024 |
|---|---|---|---|---|---|---|---|---|
| bahamut | 7% | 4% | 4% | 6% | 3% | 3% | 4% | 4% |
| charybdis | 10% | 9% | 7% | 11% | 19% | 17% | 11% | 12% |
| Ergo | 100% | 55% | 38% | 0% | 38% | 32% | 4% | 2% |
| Hybrid | 12% | 10% | 10% | 10% | 14% | 11% | 7% | 7% |
| InspIRCd | 43% | 41% | 38% | 32% | 39% | 30% | 10% | 8% |
| IRCU | 9% | 20% | 7% | 9% | 9% | 18% | 22% | 15% |
| ngircd | 34% | 34% | 22% | 24% | 33% | 23% | 13% | 13% |
| Ratbox | 19% | 18% | 17% | 23% | 26% | 22% | 13% | 12% |
| UnrealIRCd | 8% | 8% | 8% | 7% | 12% | 8% | 6% | 6% |