1170833 - home.nest.com breaks with Firefox 39 or higher

Status: RESOLVED FIXED

(Web Compatibility :: Site Reports, defect)

Description

[Chris AtLee [:catlee]]

I am unable to use home.nest.com with Firefox 39 or higher due to this error:
An error occurred during a connection to transport01-rts10-iad01.transport.home.nest.com.

SSL received a weak ephemeral Diffie-Hellman key in Server Key Exchange handshake message.

(Error code: ssl_error_weak_server_ephemeral_dh_key)

Comment 1

[Daniel Veditz [:dveditz]]

See also this other user having problems: https://twitter.com/phinze/status/604718110210441216

Comment 2

[Daniel Veditz [:dveditz]]

Fallout from the Logjam fix

Comment 3

[Yuhong Bao]

768-bit DHE. Wonder if it is Java. Will notify Google security.

Comment 4

[Yuhong Bao]

Just added sleevi and wtc to CC list.

Comment 5

[Ryan Sleevi]

Please report through the proper channels, rather than CC'ing random Googlers or tweeting at them :)

In this case, reporting through our normal security channels is the right way, the same as any security issue.

Comment 6

[Yuhong Bao]

I did. Cid: 1-8374000007338 if interested.

Comment 7

[Chris AtLee [:catlee]]

I also tried contacting Nest support (ref 01247546), and was encouraged to try a different browser instead :P

Comment 8

[Masatoshi Kimura [:emk]]

Workaround: install Disable DHE extension:
https://addons.mozilla.org/ja/firefox/addon/disable-dhe/

Comment 9

[Adam Langley]

I believe that this should now be fixed on the server side.

Comment 10

[Yuhong Bao]

TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA is still enabled though, which is probably an error.