Closed Bug 1185080 Opened 7 years ago Closed 7 years ago

car2go.com is RC4-only

Categories

(Web Compatibility :: Desktop, defect)

Product:
Web Compatibility
Component:
Desktop
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: da, Unassigned)

References

Details

In Nightly OS/X build id 20150716030208 (Mozilla/5.0 (Macintosh; Intel Mac OS X 10.10; rv:42.0) Gecko/20100101 Firefox/42.0)

If I go to https://car2go.com I get an SSL error:

An error occurred during a connection to www.car2go.com. Cannot communicate securely with peer: no common encryption algorithm(s). (Error code: ssl_error_no_cypher_overlap) 

Chrome (including Canary) is fine.

I assume the change in hashing algorithm is deliberate, but this is a pretty mainstream brand and a "modern" website, so wanted to flag it.
car2go.com is RC4-only: https://www.ssllabs.com/ssltest/analyze.html?d=car2go.com
Blocks: RC4-Dependence
Component: Security → Desktop
Product: Core → Tech Evangelism
Summary: car2go HTTPS connection not allowed because "no common encryption algorithm" → car2go.com is RC4-only
Fixed.
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → FIXED
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.