FireFox Disables Old Security Protocols

I received an error today when I tried to access a SSL protected website. According to FireFox;

Firefox can't connect securely to because the site uses a security protocol which isn't enabled.


It seems that FireFox has removed the support for older/insecure SSL sessions. Some research showed that these setting are accessible through the 'hidden' configuration in FireFox. Just type about:config in your addressbar and it shows the advanced settings of FireFox.

Put security.ssl3.rsa_rc4_40_md5 in the filter bar, so that all other settings are removed from the current view. After that set the parameter to true (default is false).

After this you're able to access the website. If not try enabling the other encryption parameter to true (which are set to false). Filter on security, and the parameter are quite similar to the one discussed in this entry.

Note that there might be some security issues when you enable old(er) security protocol support in FireFox. These are disabled for a reason!!!.
Posted on November 29, 2006 and filed under Browsers, Internet, Security.