FreeBSD Forum access problem (was Re: Endless Data Loss)

[Ian Smith]

In freebsd-questions Digest, Vol 581, Issue 7, Message: 9
On Sat, 25 Jul 2015 20:03:43 +0200 Polytropon <freebsd at edvax.de> wrote:
 > On Sat, 25 Jul 2015 09:23:51 -0700, jungle Boogie wrote:
 > > On 25 July 2015 at 06:51, Polytropon <freebsd at edvax.de> wrote:
 > > > I've tried back and forth with Opera (version 11.50/1074 here).
 > > > From "about:config" with the search terms "tls" and "ssl" and
 > > > through Tools -> Preferences -> Advanced -> Security... I just
 > > > keep getting this "helpful" message:
 > > >
 > > >         https://forums.freebsd.org/
 > > >
 > > >         Error
 > > >
 > > >         Could not connect to remote server
 > > >         Check that the address is spelled correctly,
 > > >         or try searching for the site.
 > > 
 > > 
 > > Can you access https://www.freebsd.org/ ?
 > 
 > Yes, that page never stopped working.
 > 
 > > Both have a preferred cipher of TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
 > 
 > Interesting... so what's the significant difference here?

That's not the problem.  The problem with the forums site is that it no 
longer allows connections using SSLv3 or TLS 1.0 .. it requires at least 
TLS 1.1 now, and might later accept only TLS 1.2, even just for reading.

We're told that this policy won't be applied to www or svnweb since you 
can't log in to those sites.  So far, bugzilla is still allowing my old 
Seamonkey to log in.  I wish I had more time to upgrade my surfin' box.

Gory details .. long thread that wanders off into other issues later:

http://lists.freebsd.org/pipermail/freebsd-security/2015-May/008350.html

cheers, Ian