0

I tested the latest Firefox beta using https://cc.dcsec.uni-hannover.de/ and all ciphers supported by Firefox 25 use MAC SHA1; none of them allow SHA-2. Can this be changed? Do Mozilla have plans to use SHA-2 in the future?

Besides, when I try to access a site which supports only SHA-2 MACs, I get an error.

I tested on Ubuntu 13.10 using ppa:mozillateam/firefox-next to have Firefox using NSS 3.15.1 and the result was the same: no SHA256 ciphers were available. Chrome (with >= NSS 3.15.1) and Opera work fine.

I filed a bug to see if I could get some reply from Firefox developers; at the support forums things are too quiet.

2 Answers 2

0

As noted here Firefox community is not pushing in this direction, seem to me that HMAC with SHA-2 will not be an option.

0

Cipher suites with HMACs using SHA-2 have been introduced in TLS 1.2. Currently, Firefox supports only TLS 1.1. For more info on TLS 1.2 support, there is an open bug at Mozilla's Bugzilla.

As you noticed, the bug has been fixed at Firefox 25.0 beta. If you change the security.tls.version.max to 3 in the about:config page (it's in the link you provided) you can then visit https://www.ssllabs.com/ssltest/viewMyClient.html to test your client. At the bottom you will see that SHA-2 is supported.

5
  • Thanks for your reply @Fotis That bug have an status of RESOLVED FIXED. Pls, note that I'm talking about Firefox 25 beta.
    – user193540
    Oct 4, 2013 at 23:39
  • Another reference
    – user193540
    Oct 4, 2013 at 23:58
  • Isn't better to ask this at firefox / mozilla dev forum?
    – Darius
    Oct 5, 2013 at 7:54
  • Ops, I'm really sorry, I was interested in this too and I was under the impression that there was still no support. I had the link in my bookmarks and just pasted it.
    – Fotis
    Oct 5, 2013 at 8:07
  • I create a request/question in the Firefox support forum.
    – user193540
    Oct 5, 2013 at 12:43

You must log in to answer this question.