Go Back  Airline Pilot Central Forums > Airline Pilot Forums > Major > United
Server has a weak ephemeral..." >

Server has a weak ephemeral..."

Search

Notices

Server has a weak ephemeral..."

Thread Tools
 
Search this Thread
 
Old 09-07-2015 | 09:19 AM
  #11  
Thread Starter
On Reserve
 
Joined: Jul 2008
Posts: 156
Likes: 0
Default

Thanks for the help. I installed the FF plugin. That way, I could easily undo it since that plugin defeats the security stuff that both FF and Chrome have created specifically to protect the end users against badly configured servers. I see in the ALPA Scheduling Committee brief that UAL knows something is wrong. Hopefully it gets fixed shortly so this workaround isn't needed.

Thanks again!
Reply
Old 09-07-2015 | 12:40 PM
  #12  
Line Holder
 
Joined: Jun 2010
Posts: 943
Likes: 0
From: 747 Captain, retired
Default

Originally Posted by steve0617
Thanks for the help. I installed the FF plugin. That way, I could easily undo it since that plugin defeats the security stuff that both FF and Chrome have created specifically to protect the end users against badly configured servers. I see in the ALPA Scheduling Committee brief that UAL knows something is wrong. Hopefully it gets fixed shortly so this workaround isn't needed.

Thanks again!
The best way to put the company on notice is to have the MEC demand an extension to the bidding window another 10 days! They'll fix it quick.
Reply
Old 09-07-2015 | 01:10 PM
  #13  
rickair7777's Avatar
Prime Minister/Moderator
Veteran: Navy
 
Joined: Jan 2006
Posts: 44,882
Likes: 681
From: Engines Turn or People Swim
Default

Originally Posted by Boulderian
Here is the quick fix for Firefox that does not require installing anything.

In address line in Firefox browser type: about:config
In the page that opens up, look for these two entries:

security.ssl3.dhe_rsa_aes_128_sha
security.ssl3.dhe_rsa_aes_256_sha

Toggle to FALSE for both
Might consider resetting those to "true" when you're done on the UAL site.
Reply
Old 09-07-2015 | 03:59 PM
  #14  
UAL T38 Phlyer's Avatar
Moderate Moderator
 
Joined: Mar 2008
Posts: 5,681
Likes: 0
From: Curator at Static Display
Default

Rick:

What are the repercussions if you don't?
Reply
Old 09-08-2015 | 08:47 AM
  #15  
Line Holder
 
Joined: Feb 2013
Posts: 88
Likes: 0
Default

Originally Posted by UAL T38 Phlyer
Rick:

What are the repercussions if you don't?
With it set to FALSE Firefox will still warn you that you are connecting to a dangerous or weak server (UAL) and ask if you wish to continue at your own risk. With it set to TRUE, it forbids you from connecting to such server - it makes the decision for you.

The danger of having it set to FALSE is that you could potentially try connecting to a phishing server unintentionally (a server pretending to be your bank and try to steal you login credentials), and even after being warned by Firefox, agree to continue putting your identity and computer at risk.

If you choose to have it set to FALSE just be sure that you never ignore the server security warning and only agree to continue if you are certain that you are connecting to your intended server (connecting via CCS link or such.)

I use Firefox only for company business (CCS & Skynet); Apple Safari with high security restrictions for all Banking; and Chrome for general goofing around the web - that way even if some malicious tracker sneaks by Chrome, it will remain isolated from my work or banking.
Reply
Related Topics
Thread
Thread Starter
Forum
Replies
Last Post
HDawg
FedEx
7
08-19-2015 10:00 AM
iarapilot
Cargo
5
11-14-2009 06:00 PM
Groundhog
Hangar Talk
8
11-13-2009 05:05 PM
AFW_MD11
Cargo
35
06-17-2008 09:15 AM
JethroF15
Cargo
43
12-01-2007 12:22 AM

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



Your Privacy Choices