Re: Sites which fail with tls 1.0

Brian Smith br...@briansmith.org writes: Thanks for replying. I am not sure about how SM works but I would expect it to work like Firefox in this aspect. So did I; but even with 2.24pre1 (same gecko as ff27) it does not. I'll grep thru the src for differences, and open a bugz. Understood.

Re: Sites which fail with tls 1.0

On Wed, Feb 5, 2014 at 5:39 PM, cl...@jhcloos.com wrote: Is the retry logic in nss or in mozilla-central? And if the latter, can anyone help narrow the search? I didn't find anything relevant in comm-central. It is in mozilla-central, in security/manager/ssl/src/nsNSSIOLayer.cpp. See these

Where are others SHA256 cipher suits in Firefox 27?

Hi, I see only: TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 (0xc02b) TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (0xc02f) Where are others? For example: TLS_RSA_WITH_AES_256_CBC_SHA256 (0x3d) Many web-sites have only TLS_RSA_WITH_AES_256_CBC_SHA256 as kind of strong(even without PFS) and weak RC4 and