MozillaZine

TLS 1.1?

Discussion of general topics about Seamonkey
fixit7
 
Posts: 88
Joined: May 19th, 2015, 3:11 pm

Post Posted June 8th, 2018, 8:13 am

Does Seamonkey comply with these guidelines?

30 June 2018 is the deadline for disabling SSL/early TLS and implementing a more secure encryption protocol – TLS 1.1 or higher (TLS v1.2 is strongly encouraged) in order to meet the PCI Data Security Standard (PCI DSS) for safeguarding payment data.

makaiguy

User avatar
 
Posts: 16641
Joined: November 18th, 2002, 6:44 pm
Location: Somewhere in SE USA

Post Posted June 8th, 2018, 8:53 am

In about:config, set security.tls.version.min to 2 to prevent protocols lower than TLS 1.1 from being used.

Reference: http://kb.mozillazine.org/Security.tls.version.*
Doug Wilson, "The Makai Guy"
Win10 (64bit): FF 52.9.0 ESR (64bit), TB 52.9.1(32bit) ║ Android 8.0/7.1.1: FF 62.0.1 No TB for Android available, dammit!
What a fool believes he sees, no wise man has the power to reason away - Doobie Brothers

fixit7
 
Posts: 88
Joined: May 19th, 2015, 3:11 pm

Post Posted June 8th, 2018, 11:34 am

Thanks, I set it to 2.

I have general.useragent.override set to this because a site would not work with Seamonkey.

Mozilla/5.0 (X11; Linux i686; rv:58.0) Gecko/20100101 Firefox/58.0

Do I set it to go to a newer version?

Frank Lion

User avatar
 
Posts: 20059
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted June 8th, 2018, 12:31 pm

fixit7 wrote:Does Seamonkey comply with these guidelines?

Yep, already does without needing to do anything. Been OK for ages.

There are notes here - https://www.paypal.com/us/smarthelp/art ... er-faq3893

and their test site is here - https://www.sandbox.paypal.com/us/home

Please visit our sandbox site from each of your browsers. If the page loads, you are already upgraded.


Good to know what PayPal think, but personally I use this test site - https://www.ssllabs.com/ssltest/viewMyClient.html
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

James
Moderator

User avatar
 
Posts: 27381
Joined: June 18th, 2003, 3:07 pm
Location: Made in Canada

Post Posted June 8th, 2018, 1:46 pm

Firefox has supported TLS 1.2 by default since Firefox 27.0 Release (Feb 4, 2014) (or any SeaMonkey using Gecko 27.0 or later) as per Bug#861266

From Firefox 60 Release Notes:
On-by-default support for draft-23 of the TLS 1.3 specification


There are TLS settings prefs on the about:config page that specify the minimum and maximum TLS version.

security.tls.version.min = 1
security.tls.version.max = 4
1 means TLS 1.0
2 means TLS 1.1
3 means TLS 1.2 (default for max as of 27 to 59)
4 means TLS 1.3 (default for max as of 60)

http://kb.mozillazine.org/security.tls.version.*

fixit7
 
Posts: 88
Joined: May 19th, 2015, 3:11 pm

Post Posted June 8th, 2018, 7:42 pm

Frank Lion wrote:
fixit7 wrote:Does Seamonkey comply with these guidelines?

Yep, already does without needing to do anything. Been OK for ages.

There are notes here - https://www.paypal.com/us/smarthelp/art ... er-faq3893

and their test site is here - https://www.sandbox.paypal.com/us/home

Please visit our sandbox site from each of your browsers. If the page loads, you are already upgraded.


Good to know what PayPal think, but personally I use this test site - https://www.ssllabs.com/ssltest/viewMyClient.html


thanks. I like the sslabs.com site.

The paypal test site did not work for me unless the sandbox site just loads a page. I could not log in there but could on their regular site.

Frank Lion

User avatar
 
Posts: 20059
Joined: April 23rd, 2004, 6:59 pm
Location: ... The Exorcist....United Kingdom

Post Posted June 9th, 2018, 3:17 am

fixit7 wrote:The paypal test site did not work for me unless the sandbox site just loads a page. I could not log in there but could on their regular site.

Which is exactly what is supposed to happen for this simple test, unless you have also previously created Sandbox accounts - https://www.paypal.com/gb/smarthelp/art ... unt-ts1408

In fairness, PayPal do make it pretty clear what you have to do -

Please visit our sandbox site from each of your browsers. If the page loads, you are already upgraded.
Metal Lion latest SeaMonkey & Thunderbird Themes - Sea Monkey and Silver Sea Monkey
"The only thing necessary for the triumph of evil, is for good men to do nothing." - Edmund Burke (attrib.)

fixit7
 
Posts: 88
Joined: May 19th, 2015, 3:11 pm

Post Posted June 10th, 2018, 8:45 pm

Thanks for the clarification.

Return to SeaMonkey General


Who is online

Users browsing this forum: No registered users and 1 guest