Windows XP. Python through about 2.6. Java until quite recently. Old Perl code that I shudder to think about. <shudder> Oh, and some old Android. The Andr

Windows XP. Python through about 2.6. Java until quite recently. Old Perl code that I shudder to think about. <shudder> Oh, and some old Android. The Android version that started supporting SNI is apparently also the version that tightened up licensing, so a number of third-world forks still use the old version. And as long as most of the web works without SNI, they don't have a huge incentive to change that. The work that some browser vendors (Mozilla, Google) are doing to privilege imperfect-TLS over no-TLS is crucial here. Also, yes: new Web work should all be done over HTTPS.