What websites are you seeing this warning for? Mozilla (and other browser vendors) are taking steps to remove the scourge of poorly configured security setups from the internet, you are likely running into websites that are using old security technologies.

These sites are local intranet sites used internally only.

Tyler Downer said

What websites are you seeing this warning for? Mozilla (and other browser vendors) are taking steps to remove the scourge of poorly configured security setups from the internet, you are likely running into websites that are using old security technologies.

These sites are local intranet sites used internally only.

The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite.

You can open the about:config page via the location/address bar and use its search bar to locate this pref:

• security.tls.insecure_fallback_hosts

You can double-click the line to modify the pref and add the full domain (TEXT) to the value of this pref. If there are already websites (domains) in this list then add a comma and the new domain (no spaces). There should only be domains separated by a comma in the Value column (example.com,www.example.com).

• https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security
• https://developer.mozilla.org/en-US/Firefox/Releases/37/Site_Compatibility#Security

cor-el said

The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite. You can open the about:config page via the location/address bar and use its search bar to locate this pref:

• security.tls.insecure_fallback_hosts

You can double-click the line to modify the pref and add the full domain (TEXT) to the value of this pref. If there are already websites (domains) in this list then add a comma and the new domain (no spaces). There should only be domains separated by a comma in the Value column (example.com,www.example.com).

---

• https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security
• https://developer.mozilla.org/en-US/Firefox/Releases/37/Site_Compatibility#Security

I upgraded my browser to 37.2 and made the above change as asked. I am still getting a security prompt and i am trying to click add exception button, nothing happens.

G-Tiwana said

cor-el said

The website may try to fallback to TLS 1.0 in a way that is no longer allowed in current releases or may be using a deprecated cipher suite. You can open the about:config page via the location/address bar and use its search bar to locate this pref:

• security.tls.insecure_fallback_hosts

You can double-click the line to modify the pref and add the full domain (TEXT) to the value of this pref. If there are already websites (domains) in this list then add a comma and the new domain (no spaces). There should only be domains separated by a comma in the Value column (example.com,www.example.com).

---

• https://developer.mozilla.org/en-US/Firefox/Releases/36/Site_Compatibility#Security
• https://developer.mozilla.org/en-US/Firefox/Releases/37/Site_Compatibility#Security

I upgraded my browser to 37.2 and made the above change as asked. I am still getting a security prompt and i am trying to click add exception button, nothing happens.

I posted a short video about my problem maybe it will help to visualize the problem. http://youtu.be/Yn3xgLOqdfI

I posted a short video about my problem maybe it will help to visualize the problem. http://youtu.be/Yn3xgLOqdfI

What does it say under the Technical details?

Open this chrome URI by pasting or typing this URI in the location/address bar to open the "Add Security Exception" window and check the certificate:

• chrome://pippki/content/exceptionDialog.xul

In the location field type/paste the URL of the website

• retrieve the certificate via the "Get certificate" button
• inspect the certificate via the "View..." button