TLS 1.2 mac browser problems

[Blaze Nielsen]

Anybody on a mac or iphone know of a working tls 1.2 browser? Ive tried safari, firefox and chrome. We will be cut off from transactions on june 15. LL support has been no help at all.

[Whirly Fizzle]

According to https://en.wikipedia.org/wiki/Template:TLS/SSL_support_history_of_web_browsers , as long as you are on OSX 10.9 or later, you should have TLS 1.2 support on Safari, Chrome & Firefox.

People still on XP & Vista won't have TLS 1.2 support in Internet Explorer.

Chrome has already stopped supporting XP & Vista - https://chrome.googleblog.com/2015/11/updates-to-chrome-platform-support.html

[Blaze Nielsen]

On the Linden Lab blog they suggest this: " Please check that your browser’s security support is up to date. You can do this simply by visiting https://www.howsmyssl.com/ and checking that it detects TLS 1.2 in the Version section:" on my mac I've done this with the latest versions of Safari, Firefox and Chrome and each fails the test. My safari on iphone also fails as well as Chrome which I just installed to test.  I have asked the lab for further guidance on this issue, otherwise they are heading for a big disaster come June.

 

 

[Anastasia Horngold]

On Mac 10.9.5, I have TLS 1.2 checking out just fine for three browsers:

Chrome Results

Safari results

Firefox results

 

 

[Blaze Nielsen]

Your screenshots show me your firefox and safari are both "bad" and your chrome is "probably ok" So you will probably be able to access your SL finances on Chrome, but not for certain. On that website my osx safari and ios phone both read as "improvable" whatever that means. But I assume my up to date version of Safari will not access financial SL information come June 15.

 

operating system osx 10.11.4

[ObviousAltIsObvious]

for the puirpose of getting working with SL, the overall "bad" on those screens is not important, only the TLS 1.2 support is.

for those browsers, the "bad" rating comes from supporting some obsolete ciphers in addition to the required current ones. it is a potential problem to use them on other web sites, in that insecure connections will still sppear to be secured.

 

 

[Luciana Florian]

Wondering whether removing those insecure ciphers is something we are somehow supposed to do, or whether the TLS people are working on removing them. Anyone know?