27.8.0 and Browsec

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
_yuyu_
Lunatic
Lunatic
Posts: 253
Joined: 2015-03-02, 14:18

27.8.0 and Browsec

Unread post by _yuyu_ » 2018-03-03, 11:09

I use Browsec VPN 2.7.0 add-on (the latest version that seems to work with Pale Moon) and it worked quite fine on PM 27.7.2. After updating PM to 27.8.0 any connection with enabled Browsec ends up with "Secure Connection Failed" screen. Reverting PM to 27.7.2 resolves the problem. Does this happen as a result of updated TLS support?
Pale Moon 32-bit on Win 7 x64
Top
JustOff

Re: 27.8.0 and Browsec

Unread post by JustOff » 2018-03-03, 11:34

Nobody trusts StartCom anymore: https://www.ssllabs.com/ssltest/analyze ... postlm.com

PS: But you can go to https://postlm.com and add it to exceptions at your own risk.
Last edited by JustOff on 2018-03-03, 11:58, edited 2 times in total.
Top
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35647
Joined: 2011-08-28, 17:27
Location: Motala, SE

Re: 27.8.0 and Browsec

Unread post by Moonchild » 2018-03-03, 15:11

StartCOM has been distrusted on all platforms -- this has been the case for a long while now and part of our NSS library update was the removal of StartCOM certificates from the trusted CAs. Since they have been forced into foreclosure as a CA by not being given fair procedure consideration for trust reinstatement, they also won't be returning as a CA and removal of their trust anchors was the logical next step.

If the VPN hasn't seen fit yet to find a different CA, they are likely not going to be a party I would trust all my web traffic to; but if you insist you can take the route offered by JustOff to make an exception for them and manually trusting them.
Last edited by Moonchild on 2018-03-03, 15:16, edited 1 time in total.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Top
JustOff

Re: 27.8.0 and Browsec

Unread post by JustOff » 2018-03-03, 15:41

Moonchild wrote:If the VPN hasn't seen fit yet to find a different CA, they are likely not going to be a party I would trust all my web traffic to
The newer versions of Browsec add-on use a different domain (postls.com) that does not have such problems, but unfortunately they are only available as WebExtensions.
Top
_yuyu_
Lunatic
Lunatic
Posts: 253
Joined: 2015-03-02, 14:18

Re: 27.8.0 and Browsec

Unread post by _yuyu_ » 2018-03-03, 15:43

JustOff, Moonchild

Yes, it's clear to me now. Thank you both.
Pale Moon 32-bit on Win 7 x64
Top
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35647
Joined: 2011-08-28, 17:27
Location: Motala, SE

Re: 27.8.0 and Browsec

Unread post by Moonchild » 2018-03-03, 15:59

JustOff wrote:The newer versions of Browsec add-on use a different domain
Any real VPN shouldn't need a browser extension, either.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Top
JustOff

Re: 27.8.0 and Browsec

Unread post by JustOff » 2018-03-03, 16:15

I absolutely agree with you - such extensions can not be trusted with sensitive data, but at the same time, extensions like Browsec can be useful to get around state Internet censorship (for example Roskomnadzor) or regional restrictions.
Top
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35647
Joined: 2011-08-28, 17:27
Location: Motala, SE

Re: 27.8.0 and Browsec

Unread post by Moonchild » 2018-03-03, 17:17

Any real VPN will do so as well, without the risk.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Top
JustOff

Re: 27.8.0 and Browsec

Unread post by JustOff » 2018-03-03, 17:39

But not for free ;)
Top
Fedor2

Re: 27.8.0 and Browsec

Unread post by Fedor2 » 2018-03-04, 14:04

Got informations from russian fellows, that installing browsec 3 at any other browser fixes issue.
Top
_yuyu_
Lunatic
Lunatic
Posts: 253
Joined: 2015-03-02, 14:18

Re: 27.8.0 and Browsec

Unread post by _yuyu_ » 2018-03-05, 15:15

Fedor2 wrote:Got informations from russian fellows, that installing browsec 3 at any other browser fixes issue.
Very useful information)) This does not cover Pale Moon.
Pale Moon 32-bit on Win 7 x64
Top
User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 35647
Joined: 2011-08-28, 17:27
Location: Motala, SE

Re: 27.8.0 and Browsec

Unread post by Moonchild » 2018-03-06, 08:32

JustOff wrote:But not for free ;)
You can't have your cake and eat it too. :)
Seriously, you think operating hardware and bandwidth is free for companies? They have to make their money somehow -- and trust me when I say your data and your privacy is the commodity sold with "free VPN" services.

By the way, if you look around carefully for promos you CAN get real, safe VPN for free, but even if not, a minimal VPS set up with OpenVPN will give you a fully secure private exit node to the net at low cost.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
Top
newby89

Re: 27.8.0 and Browsec

Unread post by newby89 » 2018-08-21, 21:30

Hi, I'm from Venezuela and the government has blocked access to porn sites and financial sites like AirTM... What would a "real VPN" be? I'm asking because Browsec has a Premium, paid membership, so... I guess "paying for the cake" doesn't always make it worth eating it... Thanks in advance for you help.
Top

Return to “Browser Support”