Closed Bug 162336 Opened 22 years ago Closed 10 years ago

citicorp.com - not recognised for 128 SSL

Categories

(Web Compatibility :: Site Reports, defect)

Product:
Web Compatibility
Component:
Site Reports
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED INVALID

People

(Reporter: bts, Unassigned)

References

(
URL
)

Details

(Whiteboard: [bank]) 

The Citibank online banking software checks the 128-bit support of the browser
with link:
http://oak4.citicorp.com/us/cbna/cgi-bin/gohttps.cgi?/us/cbna/cgi-bin/128check.cgi?urls=cbol_dem

Citibank replies back, Mozilla OS/2 does "not support 128-bits encryption". In
Mozilla's settings all encryption stuff is enabled.
Other sites do work with High-grade Encryption (RC4 128 bit), maybe without a
check  ?
Please read the component description.
Security: General = only for security holes...

-> PSM
Assignee: mstoltz → ssaux
Component: Security: General → Client Library
Product: Browser → PSM
QA Contact: bsharma → junruh
Version: other → unspecified
This is a browser sniffing issue. You can verify your browser's encryption
strength here - https://www.fortify.net/sslcheck.html
Over to evangelism.
Assignee: ssaux → aruner
Status: UNCONFIRMED → NEW
Component: Client Library → US Ecommerce
Ever confirmed: true
Product: PSM → Tech Evangelism
QA Contact: junruh → bclary
OS: OS/2 → All
Hardware: PC → All
Not OS/2 specific
Component: US Ecommerce → US Banks
Summary: OS/2 Mozilla 1-aug-02 not recognised for 128 SSL → citicorp.com - OS/2 Mozilla 1-aug-02 not recognised for 128 SSL
somebody still see the problem? I can view the demo just fine with 1.4.1 RC1 / XP.
Fresh install of 1.4.1 RC1 refuses to run on my eCom 1.1 Beta1.
Stops with a SYS2070.

06-02-2003  23:05:28  SYS2070  PID 0415  TID 0001  Slot 007d
D:\MOZILLA.ORG\MOZILLA\MOZILLA.EXE
COOKIE->XPCOM.NS_NewArray__FPP15nsIMutableArray
127
remove OS from summary per mkaply's comment.

Martin, this is not the place to comment on installer problems. Please file a
Browser product bug on Mozilla OS 2
Summary: citicorp.com - OS/2 Mozilla 1-aug-02 not recognised for 128 SSL → citicorp.com - not recognised for 128 SSL
I know, but with this message you will know I'm not able to give you an answer
on your question if the original problem is solved.
Whiteboard: [bank]
SPAM: New Components
Assignee: aruner → english-us
Component: US Banks → English US
QA Contact: bc → english-us
MozillaPL.org has reports of the same problem with another CitiBanks' website: 
http://citidirect-eb.citicorp.com/ page.

"403.5 Forbidden: SSL 128 required

This error message indicates that the resource you are trying to access is
secured with a 128-bit version of Secure Sockets Layer (SSL). In order to view
this resource, you need a browser that supports this level of SSL."

( http://mozillapl.org/forum/sutra38889.html )
one of the best references/recommendations I've found for encouraging financial institutions to support firefox is located at bankers on-line web site 

http://www.bankersonline.com/security/security_browserthreat070204.html 

It was written in 2004 during the download.ject attack, but much of it still applies today.  This is a good link to send when contacting banks.

→ ping oak4.citicorp.com
PING oak4.citicorp.com (192.193.210.17): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3
Request timeout for icmp_seq 4
Request timeout for icmp_seq 5
Assignee: english-us → nobody
Status: NEW → RESOLVED
Closed: 10 years ago
Component: English US → Desktop
Resolution: --- → INVALID
Product: Tech Evangelism → Web Compatibility
You need to log in before you can comment on or make changes to this bug.