Pale Moon forum

Look this (Gigabyte account registration site): https://www.ssllabs.com/ssltest/analyze ... gabyte.com

We need a world-wide ban on people still using IIS 6.0

Thanks for the reference site. I checked my own domains and while they rate an "A" there was good info about certs that will be distrusted soon.

Here's another 'F':
viewtopic.php?f=29&t=13638&p=104926#p97021
That post is more than one year old, and deal.no is still using the same damn outdated certificate!
The worst thing is that it's a very popular web shop with a lot of customers too, and most browsers accept their certificate without as much as a warning.
I've actually notified this web shop's support division several times regarding this issue, but they never even bothered to send me a reply!

Tomaso: deal.no gets an 'F' because they are vulnerable to the POODLE TLS attack -- their certificate is actually fine. Other browsers connect to it without complaints because they still accept 3DES and the certificate checks out. Pale Moon doesn't allow 3DES for https by default because of its weak nature and known issue with their small block size (SWEET32 birthday attack). Like many other sites they likely won't change anything until mainstream browsers can no longer connect (and then they will likely have it fixed in a day or 2). mainstream browsers however are simply afraid to "break the web" and are holding off on disabling 3DES because nobody wants to go first. And there we have a status quo.

Moonchild wrote:deal.no gets an 'F' because they are vulnerable to the POODLE TLS attack

I know.
Thought it was related to the certificate.
I'm not actually comparing it to the horrible example posted by dark_moon.
But still, like I've pointed out many times before; this is just another example of how difficult it is to get any response from web developers.
Contacting support services is good for most things, but as soon as you mention a web problem... Nothing!

I actually opened a new bugzilla bug to request disabling 3DES in Firefox (surprised there was none yet in search).
The sites left aren't going to be responsive to tech evangelism. They simply have to be forced to improve by browsers no longer supporting their 15 year old server software that is woefully insecure.

Thanks Moonchild!
Please let us know how the answer