1165400 - US Airways sites are RC4-only

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Boris Zbarsky [:bzbarsky]]

[Tracking Requested - why for this release]: Wouldn't want to release this if it's not channel-specific.

I get:

  An error occurred during a connection to reservations.usairways.com. Cannot
  communicate securely with peer: no common encryption algorithm(s). (Error code:
  ssl_error_no_cypher_overlap) 

This is happening for me on Aurora 39 but not Beta 38.  Not sure whether that's a channel difference or a 39 vs 38 difference, so requesting tracking 39 for now...

Comment 1

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

Looks like their sites are RC4-only. RC4 fallback is disabled by default on non-release/beta builds for the time being.

Comment 2

[Dana Keeler (she/her) (use needinfo) [:keeler] (on leave)]

(See also https://www.ssllabs.com/ssltest/analyze.html?d=reservations.usairways.com )

Comment 3

[Liz Henry (:lizzard) (relman/hg->git project)]

Looking around a bit to try and report this to US Airways (or American Airlines). The only obvious way to contact them is through a phone number.

Comment 4

[Liz Henry (:lizzard) (relman/hg->git project)]

I don't think I need to track this specific site given that this will only be true for nightly and aurora builds for now.

Comment 5

[Hallvord R. M. Steen [:hallvors]]

If we're going to contact them, here are some possible contact points:
Twitter: http://twitter.com/americanair
Facebook: https://www.facebook.com/AmericanAirlines
Contactlink: http://www.usairways.com/MEMBERSHIP/Login.aspx?returnURL=http://www.usairways.com/en-US/contact/default.html (as the URL gives away, only for registered users..)

Comment 6

[Panos Astithas (he/him) [:past] (please ni?)]

This should probably be folded into bug 1142703 (maybe even fold both into bug 1141604?).

Comment 7

[Masatoshi Kimura [:emk]]

Fixed.