We should all know by now that SSLv3 is a broken security protocol due to the POODLE vulnerability. Firefox tries to connect to a website using the strongest security that the web server provides. It is possible to change the settings in Firefox to force a less secure connection which can tell us whether SSLv3 is on or not.
Change the settings
In firefox go to the url about:config. Then search for tls.version.
The different TLS versions are:
0– SSL 3.01– TLS 1.02– TLS 1.13– TLS 1.2
By changing the max version to be 0 you are telling Firefox you don’t want to use anything higher than SSLv3. Please only do this for testing purposes and do not leave your browser on this setting.
Testing the connection
Now browse to the site you wish to test. Click on the little padlock icon in the address bar, then click more information.
At the bottom of this panel will display the technical details about the site. In this image below you can see that the browser negotiated to the site using SSLv3 which is broken encryption.
Comments