# Meta.discourse.org issue on Firefox

**URL:** https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350
**Category:** Bug
**Created:** [2016年八月29日 02:08 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350 "2016-08-29T02:08:01Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![Steven](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/steven/32/187890_2.png) [@Steven](https://meta.discourse.org/u/Steven)
#### Post date: [2016年八月29日 02:08 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/1 "2016-08-29T02:08:01Z")

</div>

I have an issue on Firefox, `meta.discourse.org` doesn’t work, Firefox seems to block the website with an error message : the connection is not secure

```
NS_ERROR_NET_INADEQUATE_SECURITY

```

(The rest is in french)

On 1 of 10 refresh, I have another error message

```
SSL_ERROR_ILLEGAL_PARAMETER_ALERT

```

Is it only me ?

(No problem at all on Chrome, Opera, Windows Phone)

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [2016年八月29日 02:10 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/2 "2016-08-29T02:10:21Z")

</div>

Which version of Firefox are you running? I’ve recently made some changes to the SSL config to mitigate the sweet32 attack, so perhaps I poked something else accidentally. A translation of the French error message might be useful, too, even if it’s just a quick Google Translate job – hopefully the gist of it will come through.

ETA: Is this roughly what the French text is saying?

> [meta.discourse.org](http://meta.discourse.org) uses security technology that is outdated and vulnerable to attack. An attacker could easily reveal information which you thought to be safe. The website administrator will need to fix the server first before you can visit the site.

---

<div class="post-metadata">

### Author: ![Steven](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/steven/32/187890_2.png) [@Steven](https://meta.discourse.org/u/Steven)
#### Post date: [2016年八月29日 02:16 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/3 "2016-08-29T02:16:31Z")

</div>

I have the latest version 48.0.1 (64 bits)

This is the message I have yes

---

<div class="post-metadata">

### Author: ![frabrunelle](https://avatars.discourse-cdn.com/v4/letter/f/7ba0ec/32.png) [@frabrunelle](https://meta.discourse.org/u/frabrunelle)
#### Post date: [2016年八月29日 02:18 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/4 "2016-08-29T02:18:14Z")

</div>

I also get the same error using Firefox 48.0.1. Not just on [meta.discourse.org](http://meta.discourse.org), but also on other forums that are hosted by the Discourse team.

 ![](https://global.discourse-cdn.com/meta/original/3X/a/4/a45ba399632113dd362d1c9267875b14baac28a3.png)

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [2016年八月29日 02:20 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/5 "2016-08-29T02:20:07Z")

</div>

Yeah, clearly something’s not right in the cipher suite selection. Strangely, [SSL Labs still gives us an A+](https://www.ssllabs.com/ssltest/analyze.html?d=meta.discourse.org&s=2001%3a470%3a1%3a3a8%3a0%3a0%3a0%3a201). I’ll investigate further and update here when I’ve got news.

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [2016年八月29日 02:24 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/6 "2016-08-29T02:24:37Z")

</div>

OK, some more updates: it looks like the HTTP/2 spec [gets a little aggressive about things which, IMO, aren’t really in its bailiwick](http://httpwg.org/specs/rfc7540.html#TLSUsage). I’m going through that now to see what I’ve done wrong.

---

<div class="post-metadata">

### Author: ![Steven](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/steven/32/187890_2.png) [@Steven](https://meta.discourse.org/u/Steven)
#### Post date: [2016年八月29日 02:53 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/7 "2016-08-29T02:53:42Z")

</div>

It works now.

I didn’t try for 30 minutes, but you have found the solution I guess

---

<div class="post-metadata">

### Author: ![mpalmer](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/mpalmer/32/45740_2.png) [@mpalmer](https://meta.discourse.org/u/mpalmer)
#### Post date: [2016年八月29日 02:56 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/8 "2016-08-29T02:56:16Z")

</div>

Yes, the solution has been found. Firefox came good a little while ago, but my fix caused issues, in turn, for lesser browsers (_cough_IE_cough_), so I spent the time fixing those up before rolling out the Mission Accomplished banner.

 ![](https://global.discourse-cdn.com/meta/original/3X/3/a/3af2610650b5a25fedc6425b15c2f7ad8d5b13ef.jpg)

I have some very unflattering things to say about the HTTP/2 spec authors. Let’s just leave it at that.

---

<div class="post-metadata">

### Author: ![codinghorror](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/codinghorror/32/110067_2.png) [@codinghorror](https://meta.discourse.org/u/codinghorror)
#### Post date: [2016年八月29日 04:24 UTC](https://meta.discourse.org/t/meta-discourse-org-issue-on-firefox/49350/9 "2016-08-29T04:24:40Z")

</div>


