Firefox-Security (Solved)

[weg]

Hello All,    I am using KDE 11.06 fully updated and Firefox 5.0.1 as my browser.I have noticed recently that in MY firefox, SSL 3 is not checked by default, only TLS 1.

(  Menu>Edit>Preferences> Advanced>Encryption.)

 In checking this out,I came across the following site,(see below),which seems to indicate that as long as TLS is checked,it is not necessary to have SSL checked,see under "How does this affect Firefox users?") so my question is;    In Firefox 5.0.1,is it unnecessary to have SSL 3 checked in Encryption if TLS is checked by default?

I also found the bit about "FIPS" quite interesting also.   I am posting from the UK.

https://developer.mozilla.org/en/NSS/FIPS_Mode_-_an_explanation




  

[menotu]

MY firefox, SSL 3 is not checked by default, only TLS 1.

That is strange, as mine (SSL 3) seems to be selected by default.

Mozilla says:

Secure Sockets Layer (SSL) lets you securely access websites. Websites that use SSL will have "https" at the start of their address. Most banking sites and online stores use SSL.

If Firefox can't access a secure site, it will show an error page saying:

Secure Connection Failed

--------

This (oldish) Mozilla site is for Configuring Firefox for FIPS 140-2

http://support.mozilla.com/en-US/kb/Configuring%20Firefox%20for%20FIPS%20140-2

[weg]

Thanks menotu;     even stranger,if I go into about:config SSL 3 sure enough it is set to "false" but when I double click to set it to true and restart firefox,unfortunately it reverts to
SSL 3 unchecked and TLS 1 checked, a real puzzler,   weg.

[menotu]

Very strange - do you have any Firefox add-ons that may possibly be over riding the defaults?

What happens if you open Firefox with a new/clean profile? Does it stick then?

[weg]

Now why didn't I think of checking out extensions?   It turns out that the culprit is "Calomel SSL Validation"extension.When I disable this,both SSL3 and TLS 1 are continuously checked by default so something I have ticked within this extension is obviously the cause of the problem.I'll check this out further later.
Thanks for your help and your time menotu,it is appreciated,   weg      (ceud mile taing)

[menotu]

Great!  It's often the small things we overlook