> I would guess that its at least secure against passive monitoring It isn't. IE3 used 40-bit encryption by default, which is trivially brute-forceable with mo

> I would guess that its at least secure against passive monitoring It isn't. IE3 used 40-bit encryption by default, which is trivially brute-forceable with modern hardware. Some versions supported 128-bit ciphers, but only through an unusual upgrade process [1] which depended upon "Global Server ID" SSL certificates with special extensions which are no longer issued. [1]: https://stuff.mit.edu/afs/sipb/machine/anxiety-closet/apachessl/mod_ssl-2.8.11-1.3.27/README.GlobalID https://stuff.mit.edu/afs/sipb/machine/anxiety-closet/apache... Even if it weren't for that, it's no longer possible to issue a certificate that would be recognized by IE3. All newly issued SSL certificates are required to be signed with SHA256, which wasn't even published until 2001. (The final release of IE3 was in 1997.)