Basilisk secure connection error

[TreborG2]

Is there a thread to report URL's that aren't working or places where HTTPS fails to load for some odd reason?

https://lis.virginia.gov/201/noc/uu462990.HTM

loads fine in chrome, fails to load in current Basilisk with interrupted message and doesn't recognize the certificate at that page.

If I change the url to HTTP it loads. (odd?)
========
Secure Connection Failed

The connection to lis.virginia.gov was interrupted while the page was loading.

The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
Please contact the website owners to inform them of this problem.
========


Either way .. still happier with Basilisk as my primary browser, and thank you for the work you do!

TY!

-T

[ron_1]

Something must be wrong with their certificate. The reason it loads in Chrome is because of their philosophy "connect at all costs." Basilisk (and Pale Moon) prioritizes your safety by refusing the connection.

Is there a thread to report URL's that aren't working or places where HTTPS fails to load for some odd reason?

Should have just made a new post.

[Moonchild]

Split off to a new thread. Tacking a usage question on to a release announcement is never the right thing to do

As for the website: Qualys give it a big fat "F" rating.
https://www.ssllabs.com/ssltest/analyze.html?d=lis.virginia.gov

For good reason, too. It's yet another IIS 6.0 installation with broken security AND SSL 2.0 still enabled. Not only is it insecure for itself but this may also expose other websites that have proper security to attack because it may leak private keys. On top, it offers RC2 40bits which can be decrypted in real-time, as well as export ciphers which are just as useless.
As for why UXP-based browsers (including Basilisk) can't connect and Chrome can: Chrome still has overlap with TLS 1.0 and 3DES ciphers, but 3DES has long since been disabled by us because it is not considered secure enough for typical use on the open web with vulnerabilities in a similar class to RC4.

The Virginia government needs to hire someone to migrate their public-facing servers to something that isn't 15 years old and extremely insecure.

[Moonchild]

Something must be wrong with their certificate.

Actually, the certificate is the only thing that is not wrong

[therube]

http: variety works, http://lis.virginia.gov/.

(So maybe there is not expected to be https: for lis.va... ?
But then *.lis.va... are all https:, so I guess their end is just buggered.

https://rga.lis.virginia.gov/
https://budget.lis.virginia.gov/
https://liaison.lis.virginia.gov/)

[Smokey20]

Edge browser in Windows 10 1809 version (that I recently upgraded to) gives a 404 error at that site. So does current Waterfox (legacy version). A 404 error frustrates you as it is not very informative. I like the error that Vivaldi gives as it explains the problem and IMO is more informative than the error Basilisk gives. (I still love Basilisk best of all the browsers I have).

[KNTRO]

Moonchild,

Hi!

What can you say about the Banco de la Provincia de Buenos Aires' homebanking website? SSL Server Test gives it a B grade. However, I can't use this homebanking website in Basilisk.

[Moonchild]

Moonchild,

Hi!

What can you say about the Banco de la Provincia de Buenos Aires' homebanking website? SSL Server Test gives it a B grade. However, I can't use this homebanking website in Basilisk.

Certificate error: chain incomplete -- they need to supply (or you need to install as a workaround until they fix it) the intermediate certificate ("DigiCert SHA2 Extended Validation Server CA")

You should let them know.
Otherwise it should be possible to visit with Basilisk since they do support TLS 1.2 and acceptable ciphers (although their DHE suites use only a 1024 bit key parameter which is weak, they should use at least 2048 and preferably 4096 bits for that)

[KNTRO]

Thanks a lot, MC!