Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Cannot disable Cipher TLS_RSA_WITH_AES_128_GCM_SHA256 or TLS_RSA_WITH_AES_256_GCM_SHA384

  • 4 个回答
  • 1 人有此问题
  • 1 次查看
  • 最后回复者为 Reuben

Reuben
Reuben
more options

Hi there,

I'm trying to disable insecure ciphers in TLS 1.2 since 1.3 isn't widely supported yet.

I'm using this to determine whats secure: https://browserleaks.com/ssl

I cant find any option to disable these two ciphers:

0x009c TLS_RSA_WITH_AES_128_GCM_SHA256 0x009d TLS_RSA_WITH_AES_256_GCM_SHA384

Thanks :)

Hi there, I'm trying to disable insecure ciphers in TLS 1.2 since 1.3 isn't widely supported yet. I'm using this to determine whats secure: https://browserleaks.com/ssl I cant find any option to disable these two ciphers: 0x009c TLS_RSA_WITH_AES_128_GCM_SHA256 0x009d TLS_RSA_WITH_AES_256_GCM_SHA384 Thanks :)
已附加屏幕截图

被采纳的解决方案

You can disable/enable those ciphers in about:config:

security.ssl3.rsa_aes_128_gcm_sha256 for TLS_RSA_WITH_AES_128_GCM_SHA256 and security.ssl3.rsa_aes_256_gcm_sha384 for TLS_RSA_WITH_AES_256_GCM_SHA384

This will only work in the latest version of Firefox.

定位到答案原位置 👍 1

所有回复 (4)

Roland Tanglao
Roland Tanglao
  • Moderator
more options

Hi Reuben:

I personally don't know how to do this, but I've asked some developers to help!

And hopefully I'll be able to report back soon!

Cheers!

...Roland

Mike Kaply
Mike Kaply
  • Moderator
more options

选择的解决方案

You can disable/enable those ciphers in about:config:

security.ssl3.rsa_aes_128_gcm_sha256 for TLS_RSA_WITH_AES_128_GCM_SHA256 and security.ssl3.rsa_aes_256_gcm_sha384 for TLS_RSA_WITH_AES_256_GCM_SHA384

This will only work in the latest version of Firefox.

Mike Kaply
Mike Kaply
  • Moderator
more options

For reference, those new preferences were added in this bug:

https://bugzilla.mozilla.org/show_bug.cgi?id=1638369

由Mike Kaply于修改

Reuben
Reuben 提问者
more options

Thanks for that Mike.

Is this in the Beta/Nightly?

I cant seem to find it in the Win 10 standard release 78.0.2 (64-bit) or Dev edition 79.0b7 (64-bit)

EDIT: ignore me added the value in about:config and toggled to False worked. Does not appear if searched. Cheers, Reuben

由Reuben于修改