Firefox ban on SHA-1 dropped after many locked out of HTTPS sites

    Firefox ban on SHA-1 dropped after many locked out of HTTPS sites


    Posted: 07 Jan 2016
    Mozilla has temporarily reinstated support for a vulnerable cryptographic algorithm after some Firefox users were unable to access encrypted HTTPS websites.

    The browser maker blamed the unintended consequence of deprecating support for SHA-1 certificates on man-in-the-middle devices, such as security scanners and anti-virus products.

    In a blog post, security engineer Richard Barnes explained that most Firefox users aren't affected, and those who are can simply upgrade to the latest version of Firefox -- version 43.0.4, released on Wednesday -- to fix the problem.
    "When a user tries to connect to an HTTPS site, the man-in-the-middle device sends Firefox a new SHA-1 certificate instead of the server's real certificate," Barnes explained.

    "Since Firefox rejects new SHA-1 certificates, it can't connect to the server," he added.

    The good news is that you can tell if you're affected by visiting Mozilla's security blog. If you are, you can upgrade from its website.

    The bad news is that this wasn't exactly unexpected...



    Read more: Firefox ban on SHA-1 dropped after many locked out of HTTPS sites | ZDNet
    Brink's Avatar Posted By: Brink
    07 Jan 2016



  2. ThrashZone
    Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       New #1

    Good one
    If you can access the security blog you're unaffected :)

    You might of noted that Shawn
      My Computer
    Quote Quote

  4. groze
    Posts : 1,167
    W10 32 bit, XUbuntu 18.xx 64 bit
       New #2

    ThrashZone said:
    Good one
    If you can access the security blog you're unaffected :)

    You might of noted that Shawn

    Will that still work if they drop the ban?
    Last edited by groze; 11 Jan 2016 at 17:10.
      My Computer
    Quote Quote

  5. ThrashZone
    Posts : 20,583
    Win-7-Pro64bit 7-H-Prem-64bit
       New #3

    I have no idea I use Pale moon :/
      My Computer
    Quote Quote

 

  Related Discussions
I normally use Firefox or Chrome for browsing the web, but recently I tried to play a game called League of Legends that inherits properties from Internet Explorer in order to connect to servers. League of Legends would always time out on the connection, so I did some investigating on IE and found...
As of today Opera 12.17 won't connect to a number of sites like Google, Paypal. Whole bunch of Win updates last night if relevant. Works FINE with ANY run-of-the-mill http: anything though. CAN login to some https sites like eBay no problem. Other browsers work fine on anything. Seems some...
My neighbor just recently restored his Toshiba laptop back to factory settings, the Win7 load when he first bought the laptop. After if finally got all the updates applied, he tried to access one of his banking sites and entered id and password, clicked submit and the page reloaded and cleared out...
I am trying to block HTTPS access to social networking sites at work. the web filtering service we use is barracuda but they are not configured to block HTTPS only HTTP sessions.(unless they can, but we have not figured it out yet). is it possible to block access via group policy in Active...
Hey, Got this new computer here and sites using https or have used https in the past will not load. Main example I have is facebook. Going directly from the home page to facebook on IE9 it just hangs there which i open a new tab without http it loads fine. In firefox i can load the login page...
Our Sites
Site Links
About Us
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

 © Designer Media Ltd
All times are GMT -5. The time now is 17:49.
Find Us