https://services.addons.mozilla.org/ gives warnings in the error console that it does not support RFC 5746 and is potentially vulnerable to CVE-2009-3555. It does not show the safe SSL indicators if the user has set security.ssl.treat_unsafe_renegotiation_as_broken to true
versioncheck.AMO and AMO itself seem to be OK, though.
Status: NEW → RESOLVED
Last Resolved: 7 years ago
Resolution: --- → DUPLICATE
Duplicate of bug: 657920
Firefox 6b2 "versioncheck.addons.mozilla.org : server does not support RFC 5746, see CVE-2009-3555"
Product: mozilla.org → mozilla.org Graveyard
You need to log in before you can comment on or make changes to this bug.