Modern servers prefer ECDHE for forward secrecy, but many still accept RSA key exchange when an attacker manipulates the handshake. These domains are downgrade-attackable: a MITM forces RSA, harvested traffic from that session is decryptable with one stolen cert key. This finding is independent of quantum risk — it's a present-day exposure too.
| # | Domain | Score | Grade | Sector | Freshness |
|---|---|---|---|---|---|
| 1 | energy.gov | 6.3 | D | — | verified 17h ago |
| 2 | subaru.com | 5.9 | C | Global Automakers | verified 25h ago |
| 3 | cedars-sinai.org | 5.9 | C | — | verified 17h ago |
| 4 | stripe.com | 5.9 | C | — | verified 3h ago |
| 5 | gm.com | 5.9 | C | Global Automakers | verified 30h ago |
| 6 | epirus.com | 5.8 | C | — | verified 17h ago |
| 7 | propublica.org | 5.4 | C | Global News & Media | stale (2d old) |
| 8 | uclahealth.org | 5.4 | C | — | verified 17h ago |
| 9 | volkswagen.com | 5.4 | C | Global Automakers | verified 22h ago |
| 10 | politico.com | 5.4 | C | Global News & Media | verified 15h ago |
| 11 | netlify.com | 5.4 | C | — | verified 3h ago |
| 12 | monday.com | 5.3 | C | — | verified 3h ago |
| 13 | gitlab.com | 5.2 | C | — | verified 17h ago |
| 14 | honda.com | 5.2 | C | Global Automakers | verified 15h ago |
| 15 | met.police.uk | 5.2 | C | — | verified 17h ago |
| 16 | alaska.com | 5.2 | C | — | verified 9h ago |
| 17 | hyundai.com | 5.1 | C | Global Automakers | verified 24h ago |
| 18 | ford.com | 5.0 | C | Global Automakers | verified 4h ago |
| 19 | citi.com | 5.0 | C | — | verified 17h ago |
| 20 | santander.com | 5.0 | C | — | verified 17h ago |
| 21 | reuters.com | 5.0 | C | Global News & Media | verified 28h ago |
| 22 | bloomberg.com | 5.0 | C | Global News & Media | verified 2h ago |
| 23 | usbank.com | 5.0 | C | — | verified 17h ago |
| 24 | saic.com | 5.0 | C | — | verified 17h ago |
| 25 | stellantis.com | 5.0 | C | Global Automakers | verified 6h ago |
Run the same scan we use for this ranking. See your specific findings, get the migration steps, and track the domain so you know when your score improves.