I would like to find out how to turn off: TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA in Firefox.

https://www.ssllabs.com/ssltest/viewMyClient.html is reporting them as weak.

I would like to turn them off in the registry. I have tried: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168" /v Enabled /t REG_DWORD /d 00000000 /f REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168" /f

The same website is reporting that: TLS 1.1 Yes* TLS 1.0 Yes* SSL 3 Yes*

Even though I have them turned off in IE and in Firefox I have: security.tls.version.min value 3

I have cleared the cache. I have rebooted the machine.

When I go to this URL: https://tls-v1-1.badssl.com:1011/ It does say "Secure Connection Failed" (which is good) https://tls-v1-0.badssl.com:1010/ It does say "Secure Connection Failed" (which is good)

I would like to understand why sslabs.com is reporting them like they are working. And I would like to turn off the weak ciphers with a registry key.

I'm running windows 7 with all updates.

Thanks, Docfxit

migrated from softwarerecs.stackexchange.com Jan 2 at 0:18

This question came from our site for people seeking specific software recommendations.

Your Answer

By clicking "Post Your Answer", you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.