PM 26.4.1 can not open the page Topic is solved
Forum rules
This is a self-serve support board for our community. The development team can't provide any support for Windows XP (and compatible versions of Pale Moon for it) any longer.
This is a self-serve support board for our community. The development team can't provide any support for Windows XP (and compatible versions of Pale Moon for it) any longer.
-
manuk
PM 26.4.1 can not open the page
PM 26.4.1 Can not open the page https://enter.webmoney.ru/. "The connection to enter.webmoney.ru was interrupted while the page was loading." PM 26.4.0 normally open.
-
Moonchild
- Pale Moon guru
- Posts: 35647
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: PM 26.4.1 can not open the page
You're likely running into the fact that 3DES was disabled.
Make sure your XP has all service packs and the latest IE version for it installed so it can support more modern ciphers.
EDIT: oh, WOW.
webmoney is an eMoney provider, and they get.. THIS as a result? o.O
https://www.ssllabs.com/ssltest/analyze.html?d=enter.webmoney.ru&s=212.118.48.48&latest
I don't know what that particular subdomain is used for by them, but it's not secure.
The only reason you could connect before 26.4.1 was because of the one relatively secure combination that was still available (TLS 1.0 + 3DES).
They don't offer anything but 3DES and RC4, as well as EXPORT ciphers, 40/56 bit variants. They offer SSL2 that can be used to launch attacks on TLS1.0 as well (DROWN). Just.. no. The worst I've seen yet, and that for webmoney.
Make sure your XP has all service packs and the latest IE version for it installed so it can support more modern ciphers.
EDIT: oh, WOW.
webmoney is an eMoney provider, and they get.. THIS as a result? o.O
https://www.ssllabs.com/ssltest/analyze.html?d=enter.webmoney.ru&s=212.118.48.48&latest
I don't know what that particular subdomain is used for by them, but it's not secure.
The only reason you could connect before 26.4.1 was because of the one relatively secure combination that was still available (TLS 1.0 + 3DES).
They don't offer anything but 3DES and RC4, as well as EXPORT ciphers, 40/56 bit variants. They offer SSL2 that can be used to launch attacks on TLS1.0 as well (DROWN). Just.. no. The worst I've seen yet, and that for webmoney.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
-
Moonchild
- Pale Moon guru
- Posts: 35647
- Joined: 2011-08-28, 17:27
- Location: Motala, SE
Re: PM 26.4.1 can not open the page
I've sent webmoney a notice about this host. I'm confident this is a mistake/overlooked server on their side that they can and will fix short term (the least of the worries for this host is 3DES, really - it has much bigger problems like SSL2/SSL3, EXPORT, RC2 and other ssl issues that allow an attacker to break encryption in seconds).manuk wrote:Moonchild, thank. I switched value DES.
Please be aware that 3DES should be considered weak and feasibly breakable. For monetary institutions that is an unacceptable situation. You should disable 3DES again the moment you no longer need it.
"Sometimes, the best way to get what you want is to be a good person." -- Louis Rossmann
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite
"Seek wisdom, not knowledge. Knowledge is of the past; wisdom is of the future." -- Native American proverb
"Linux makes everything difficult." -- Lyceus Anubite