Closed Bug 1127204 Opened 9 years ago Closed 9 years ago

bankofthewest is TLS 1.2 intolerant and RC4 only

Categories

(Web Compatibility :: Site Reports, defect)

Product:
Web Compatibility
Component:
Site Reports
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: mt, Unassigned)

References

(
URL
)

Details

www.bankofthewest.com as well as etimebanker. and images. are TLS 1.2 intolerant.

We should ask them to upgrade their stack.  If they can't, the whitelist in bug 1037424 might be a good choice.  If we do neither, then we both stand to lose users.
The report from ssllabs is pretty dire: https://www.ssllabs.com/ssltest/analyze.html?d=bankofthewest.com

Just one bad cipher suite: RC4.  SSL3 support.  TLS 1.2 intolerant.  SHA-1 certificates.

EV certificates and HSTS are indications that someone cares about security.
(In reply to Martin Thomson [:mt] from comment #1)
> Just one bad cipher suite: RC4.

Specifically TLS_RSA_WITH_RC4_128_SHA.
Blocks: RC4-Dependence
Summary: bankofthewest is TLS 1.2 intolerant → bankofthewest is TLS 1.2 intolerant and RC4 only
Fixed.
Status: NEW → RESOLVED
Closed: 9 years ago
Resolution: --- → FIXED
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.