IE10, SSLv3 setting keeps enabling

Hi and welcome to SevenForums,
Not sure why your unchecking the default setting please share why your needing to do so :/

You do have one of the most controversial antivirus programs installed any reason for that
There are quite a few better more windows friendly free antivirus programs available
Good security combination,
https://www.sevenforums.com/system-security/206705-good-free-system-security-combination.html
https://www.sevenforums.com/system-security/297196-top-av-program-use-here-seven.html

Hi back HarryNack, welcome to 7F! :)

I'm not sure why the fixit isn't working, it could have something to do with the McAfee Settings. Have you ever had problems with McAfee and Microsoft before?
There is a McAfee KB showing the product itself depends on an interrelationship between SSL and TSL security. https://kc.mcafee.com/corporate/inde...ent&id=SB10091
https://kc.mcafee.com/corporate/inde...ent&id=sb10090

But, when you're doing it through internet options, you're missing a step, see highlight.

   Tip

I have a strange problem in IE10:
- Click on "tools" on the menu bar
- Go to "internet options"
- open "advanced" tab
- scroll to "security"
- uncheck "use SSL 3.0"
- press or click on the Apply button, then,
- press [Ok]

There is another thread with the same problem, but with IE11, and this poster also uses McAfee. You may want to keep an eye on it: SSL3.0 won't stay off | Windows Secrets Lounge, the last post asked the same obvious question I posed. Did you click on apply before ok?

You're also showing you use Firefox (FF), It won't be hardened until v34 in November. To do it manually:

Firefox : To get to the option to disable SSL3, type “about:config” in the address bar. Search for security.tls.version.min in the results or use the search bar to look for it. Double-click on the row and change the value from 0 to 1. This will force Firefox to use only TLS1.0 and above thereby disabling SSL3.0.
Firefox has already said it will disable SSL 3.0 in their next release, just as they disabled Java 6 when the latter was found to be highly vulnerable.

Source: http://www.thewindowsclub.com/ssl-3-...ability-attack

TZ

Not sure why your unchecking the default setting please share why your needing to do so :/

Harry's trying to harden his browser against the Poodle SSL3 security risk.

Ha yes I read that article after I posted
Poodle sounds like you have a better chance of getting hit by lightening numerous times before getting attacked by this :/
Cheers.

HarryNack said:

Hi There,

Indeed i tried to secure my browser from SSL 3.0 security flaw.

@Anak: I tried your "apply" before pressing "ok" tip. But that didn't help either.

Direct after rebooting my system the SSL 3.0 options was still unchecked.

But after a few minutes the SSL 3.0 option was checked again.

Thanks for the remarks.

Your welcome,

From what I highlighted inside your quote leads me to believe that something (McAfee?) is reversing your setting.

Check for any updates to McAfee, there was one released today: McAfee SuperDAT Update 7607 October 31, 2014 Download - TechSpot Update through program or this link if you're not current, and test.

   Information

If the update cures your problem the rest of this post is redundant.

But after a few minutes the SSL 3.0 option was checked again. Was this before, after or during you opened IE? When this happens may indicate if this behaviour is System or Anti-virus (McAfee) related.

Check all through McAfee's settings, see if there is some type of browser surfing protection that requires SSL3 in order to operate (remember my first post/paragraph about McAfee depending on an interrelationship between SSL and TSL), see if you can turn it off or disable it to test. I'll bet mac is turning it back on so "it" thinks its safe. This behaviour may or may not be documented.

If you can't disable the feature, the best I can tell you for now is to disable the whole McAfee program to test, opening IE shouldn't put you in any danger to test just don't go surfin'.
If it is mac doing it, you should go with another internet security program. if not, we'll have to keep looking for a reason.

I've have errands to run, I'll check back later.

Hi There,

The problem is related to Mcafee virusscan plus.
SSL 3 option stays unchecked until i open the mcafee management console.

I will try another virusscanner.

edit:
I found an old topic at the mcafee forum about the SSLv2 protocol. With the same problem.

https://community.mcafee.com/thread/...art=0&tstart=0

That's great news that you finally found the reason for the behaviour, but bad news that McAfee still hasn't fixed this "bug" after knowing about it for at least 5years.

Did you need to update McAfee?
Maybe they fixed it with the new version now that everyone knows SSL is woefully outdated.


Thank you for marking your thread solved.

That's good news Harry, I assume you've tested it, right?