Pale Moon forum

There are many threads on these forums that discuss outdated ciphers like your bank is using. Please use search for more information.

Hi. In my work i use site one of Russian bank. But when i enter to his site i see:

But in other browser (Chrome, IE) site works fine:


Win 10, PM 25.7 x64 All Add-ons are of.

... or some bottles of olive oil (while I prize the fact the browser remembers those for me). For the few sites where I could be concerned (mainly my bank or my payslip) I just do not store passwords at all, and use private windows.

As I understand it, F-Secure's bank protection prevents a second connection to the internet while user is connected to a financial site. For example, In Wndows, if I am connected to a bank using IE 11, I am blocked from accessing the internet ...

... my browser (ie. Pale Moon) doesn't support the strongest ciphers the server would prefer. In case of the server I just now tested (belonging to my bank), I reckon PM doesn't have support for: TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (0xc030) ECDH 256 bits (eq. 3072 bits RSA) FS 256 TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384 ...

... onto the site using FF ver. 28. Knowing it is not safe, I will only stay there long enough to have a quick look or to initiate a transfer to my bank. Then I log off. I am trying to hold such sessions to as short a time frame as possible under the theory that the faster I move, the less likely ...

Since it wont work in PM I plan to move my account. P< works just fine on the Chase bank and Citibank sites as well as the Vanguard brokerage site. I am likely going to move my account out of Morgan since the other alternative is to use IE 11 or recent versions Chrome, ...

... doesn't like PM using FF ver 28. I do not like what I saw. Since it wont work in PM I plan to move my account. P< works just fine on the Chase bank and Citibank sites as well as the Vanguard brokerage site. I am likely going to move my account out of Morgan since the other alternative is to ...

... in it, including everything needed to perform identity theft, and probably also financial data. I think you'll be more concerned when your bank account is suddenly depleted -- but hey, your choice, and if you're happy with the practical solution offered, then that's fine with me too :)

... to resist before . Also sometimes it can be annoying to resist: Radié de sa banque pour avoir dénoncé une appli intrusive ? Removed from his bank for denouncing intrusive app? http://rue89.nouvelobs.com/2015/06/15/radie-banque-avoir-denonce-appli-intrusive-259779 Mauvaise surprise : l’appli ...

... to resist before . Also sometimes it can be annoying to resist: Radié de sa banque pour avoir dénoncé une appli intrusive ? Removed from his bank for denouncing intrusive app? http://rue89.nouvelobs.com/2015/06/15/radie-banque-avoir-denonce-appli-intrusive-259779 Mauvaise surprise : l’appli ...

... really only one larger brokerage firm because the big ones are basically all the same and it makes absolutely no difference which one you choose. Bank of America/Merrill Lynch (BAC), Morgan Stanley/Smith Barney (MS) and Wells Fargo/Wachovia are clones basically. My guess is if you are a privacy ...

I had a nag from Santander Bank to install Trusteer Rapport which is free btw. It installed OK but the icons didn't show and nor did it report or allow me to activate for any particular web sites. I uninstalled it and then went through ...

Moonchild wrote:If I lived in Norway and had to deal with this, I'd file official complaints at my bank who can then pass it on to the ID people in an official capacity

I just did (again)!

... organization. CSP is there to protect the user, not companies. It's an effective way of preventing XSS as a whole -- but only if used properly. If bank-ID is essential for your use, then they are effectively forcing you to configure your browser in a less secure way to use it -- for a financial ...

The Norwegian Bank-ID people need to fix their scripting. Thanks for your answer, Moonchild. I understand. ..but as much as I can appreciate that, the simple fact is that it works with other browsers. And as long as things work ...

... to adjust their script to only pass the scheme://host:port or scheme://host:port/path as CSP rule. this is not a Pale Moon issue. The Norwegian Bank-ID people need to fix their scripting. In addition, they need to look at: [12:27:48.539] Content Security Policy: The page's settings blocked the ...

... or card details in advance, and will take you directly to the BankID applet): https://www.nettkonto.no/ -- EDIT: Here's a few more: https://bank.etne-sparebank.no/ https://bank.flekkefjordsparebank.no/ https://bank.luster-sparebank.no/ https://bank.skudeaakra.no/ https://nettbank.fanasparebank.no/ ...

... you're worth. ... What am I doing wrong? I don't encounter these "many" sites. Do I need to go on a big porn binge? I did have SSL troubles at my bank, but they've updated their security. :thumbup: I'm fine with HTML5 at YouTube. I don't currently have Flash installed at all, and all I'm missing ...

... and removed the VirtualBox bridge driver. I ran my shiny new FF 39.0 in Win7, and made sure I could get to the net (I logged into my on-line bank). I tried logging into my trouble web sites. No joy. I ran the Linux VM and it would not start because the network config was bad (...I had removed ...