I would like to find out how to turn off: TLS_RSA_WITH_3DES_EDE_CBC_SHA TLS_RSA_WITH_AES_256_CBC_SHA TLS_RSA_WITH_AES_128_CBC_SHA in Firefox.
https://www.ssllabs.com/ssltest/viewMyClient.html is reporting them as weak.
I would like to turn them off in the registry. I have tried: REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168" /v Enabled /t REG_DWORD /d 00000000 /f REG DELETE "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Ciphers\Triple DES 168/168" /f
The same website is reporting that: TLS 1.1 Yes* TLS 1.0 Yes* SSL 3 Yes*
Even though I have them turned off in IE and in Firefox I have: security.tls.version.min value 3
I have cleared the cache. I have rebooted the machine.
When I go to this URL: https://tls-v1-1.badssl.com:1011/ It does say "Secure Connection Failed" (which is good) https://tls-v1-0.badssl.com:1010/ It does say "Secure Connection Failed" (which is good)
I would like to understand why sslabs.com is reporting them like they are working. And I would like to turn off the weak ciphers with a registry key.
I'm running windows 7 with all updates.