HowTo: Get your browser more crypt secure
asked 2014-02-25 22:16:05 +0300
This post is a wiki. Anyone with karma >75 is welcome to improve it.
Test your browser with http://howsmyssl.com
Create a file ~/.mozilla/mozembed/user.js if not created otherwise and insert
user_pref("security.ssl3.ecdh_ecdsa_rc4_128_sha", false);
user_pref("security.ssl3.ecdh_rsa_rc4_128_sha", false);
user_pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", false);
user_pref("security.ssl3.ecdhe_rsa_rc4_128_sha", false);
user_pref("security.ssl3.rsa_rc4_128_md5", false);
user_pref("security.ssl3.rsa_rc4_128_sha", false);
user_pref("security.ssl3.rsa_fips_des_ede3_sha", false);
user_pref("security.tls.version.min", 3);
user_pref("security.tls.version.max", 3);
Test your browser again with https://howsmyssl.com
Hey, just to be fair: If the web server does only rc4 these settings will fail. But think about using ssl servers which use real time crackable crypto...
cy8aer ( 2014-02-25 22:45:12 +0300 )editI wouldnt disable RC4 completely as a lot of sites still rely on it, and if you disable it completely these sites will fail to load.
The only rc4 suite I would disable is "ssl3.rsa_rc4_128_md5" as I dont think there is any site out there relying only on this suite. Usually they at least support the slightly more secure "ssl3.rsa_rc4_128_sha" suite which is left enabled and these sites will still work.
You also recommend disabling SSL3 and this will also cripple support for many sites.
vasavr ( 2014-03-15 13:51:08 +0300 )edit