1137079 - https://whatwg.org/ Secure Connection Failed (Error code: ssl_error_no_cypher_overlap)

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Kan-Ru Chen [:kanru] (UTC+9)]

https://www.ssllabs.com/ssltest/analyze.html?d=whatwg.org

Protocols
TLS 1.2  No
TLS 1.1  No
TLS 1.0  Yes
SSL 3    No	
SSL 2    No

Cipher Suites (sorted by strength; the server has no preference)
TLS_RSA_WITH_RC4_128_SHA (0x5)   WEAK		128

Comment 1

[Yuhong Bao]

https://annevankesteren.nl/2014/09/tls-dreamhost

Comment 2

[Anne (:annevk)]

When does this fail exactly?

Per DreamHost this should be fixed this quarter, but I've seen no announcements thus far.

Comment 3

[Yuhong Bao]

Firefox is disabling RC4 fallback in Firefox 38.

Comment 4

[Anne (:annevk)]

The reason I asked is that I'm on Nightly which is 39 and whatwg.org loads fine. If anything I would expect Nightly to load less than the release channel...

Comment 5

[Yuhong Bao]

That is because they put these on a whitelist. See bug 1124039.

Comment 6

[Yuhong Bao]

And bug 1133187

Comment 7

[Kan-Ru Chen [:kanru] (UTC+9)]

I'm also on Nightly but all subdomains of and whatwg.org I tried doesn't load. I tried two instance of Firefox Nightly..

Comment 8

[Yuhong Bao]

Fortunately, I expect that March will be a bad month for RC4.

Comment 9

[Masatoshi Kimura [:emk]]

Looks like whatwg.org (and subdomains) negotiates TLS_DHE_RSA_WITH_AES_256_CBC_SHA now.