1138231 - www.bankhapoalim.co.il is RC4 only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[:Cykesiopka]

https://www.ssllabs.com/ssltest/analyze.html?d=www.bankhapoalim.co.il :
> Cipher Suites
> TLS_RSA_WITH_RC4_128_MD5 (0x4)
> TLS_RSA_WITH_RC4_128_SHA (0x5)

Comment 1

[Gingerbread Man]

TLS 1.2   No
TLS 1.1   No
TLS 1.0   Yes
SSL 3     No	
SSL 2     No

Comment 2

[Masatoshi Kimura [:emk]]

"TLS 1.2 unsupprted" does not mean "TLS intolerant".
> TLS version intolerance 	TLS 1.98  TLS 2.98

Comment 3

[Tomer Cohen :tomer]

https://www.ssllabs.com/ssltest/analyze.html?d=login.bankhapoalim.co.il
https://www.ssllabs.com/ssltest/analyze.html?d=biz.bankhapoalim.co.il

I have contacted them about RC4 and lack of TLS 1.2 support. Said that their sites for private customers (https://login.bankhapoalim.co.il) as well as their site for business customers (https://www.bankhapoalim.biz, https://biz.bankhapoalim.co.il) are currently blocked in Aurora (Firefox 41) and require an action from their side. 

I've talked with Yana from their Internet support desk *2409 ([phone]); Ticket number 114148039386.

Comment 4

[Masatoshi Kimura [:emk]]

Fixed.