Hacker News Reader

Comment by erichurkman | Hacker News Reader

How's My SSL? [1] now reports "Your SSL client is Probably Okay." for Firefox 27. Awesome!

An error occurred during a connection to www.howsmyssl.com. Peer attempted old style (potentially vulnerable) handshake.

I don't think I would trust their judgement about how my SSL is doing.

I am happy about this Firefox release; it is not just that you had to be an advanced user to get TLS 1.2 previously but that doing so would break over half the web. Now it is possible to use TLS 1.2 where available and not use it when not available.

Maybe that was it probing you?

Fedora 20 (firefox 26), "Your SSL client is Bad." :(

I just fixed that by setting:

  security.tls.version.max = 3
  security.tls.version.min = 1
  security.ssl3.rsa_fips_des_ede3_sha = false

in about:config, after which it also said "Probably good" for FF26.

Reply on news.ycombinator.com