[Dev] [Packages (i686 and x86_64) - Freedom issue #411] (invalid) [iceweasel] [icecat] enable tls 1.1 on pkgver >= 23

[labs at parabola.nu]

Issue #411 has been updated by Emulatorman.

Status changed from open to invalid

iceweasel-libre 24 version should be possible to enable TLS 1.1, but there are 2 open issues that prevent us from changing the default to enable it:
    - Compatibility with servers that are not tolerant to sending TLS 1.1 => https://bugzilla.mozilla.org/show_bug.cgi?id=839310
    - Prevent downgrade attacks => https://bugzilla.mozilla.org/show_bug.cgi?id=861310

----------------------------------------
Freedom issue #411: [iceweasel] [icecat] enable tls 1.1 on pkgver >= 23
https://labs.parabola.nu/issues/411

Author: fauno
Status: invalid
Priority: feature
Assignee: Emulatorman
Category: 
Target version: 


>From http://www.hiawatha-webserver.org/weblog/58

> Firefox 23 supports TLS/1.1... finally!!
> 7 August 2013, 14:40
> 
> Mozilla finally decided to include TLS/1.1 support in Firefox. However, most users won't benefit from this support, because it's  disabled by default and enabling is not many people will and can do. To enable TLS/1.1 support, use "about:config" in the URL bar and search for the security.tls.version.max setting. Set its value to 2 (default is 1).
> 
> Happy secure browsing!



--
You have received this notification because you have either subscribed to it, or are involved in it.
To change your notification preferences, please click here: http://labs.parabola.nu/my/account