According to a new report from researchers at Ca' Foscari University of Venice in Italy and Tu Wien in Austria, 5% of the web's top 10,000 sites had exploitable TLS vulnerabilities. The top 10,000 HTTPS sites is based upon Alexa's stats.

These flaws were caused by a combination of issues in how sites implemented TLS encryption schemes and failures to patch known bugs, (of which there are many) in TLS and its predecessor, Secure Sockets Layer. But the worst thing about these flaws is they are subtle enough that the green padlock will still appear.

[wired.com...]