K-Meleon :: Bugs

Bugs : K-Meleon Forum

You can talk about issues with k-meleon here. But please, for confirmed bugs, use the bug tracker to report and give feedback on bugs.

Goto: Forum List•Message List•Search•Log In

Your Name:
Subject:

Help information

[quote=gordon451]
I've tried to enable FIPS in KM 1.6.0b2.

The first thing I did was a little research.  I found [url=http://support.mozilla.com/en-US/kb/Configuring%20Firefox%20for%20FIPS%20140-2]Configuring Firefox for FIPS 140-2[/url] which is an old page, but FF doesn't say how old. ¬_¬

So I followed instructions, gave myself a master password, disabled SSL3 (Privacy & Security>Encryption>>Encrypted Transmission), then Privacy & Security>Encryption>>Protected Storage>Manage Crypto Devices.  In Device Manager, select [i]NSS Internal PKCS #11 Module[/i] and click "Enable FIPS".  Nothing much happened.  Actually, nothing happened.

Perservering, open "about:config", and make sure as many of the settings in "ssl" filter as I can find are set according to the FF site, almost all by switching them [b]off[/b].  Essentially, disable SSL3 and unset a number of cyphers.

However, I still see no indication that FIPS has in fact been enabled: going by the FF guide, I should see that in the Device Manager.

So, does KM 1.6.0b2 support FIPS 140-2?  Or do we have a bug?

*************************

Allied to this is a question about the security padlock at lower left corner.

On a secure website, I expect to see [url=http://www.westnet.net.au/~gordon451/parkinglot/MozillaSecure.jpg]this with an orange/amber URL bar[/url].

But on Secure Wikipedia (http[b]s[/b]:\\en...) [url=http://www.westnet.net.au/~gordon451/parkinglot/SecureWikipediaBroken.jpg]I see a red URL bar with a broken padlock[/url].  BTW, Secure Wikipedia has always done this.

Am I reading the padlocks correctly?

Gordon.[/quote]

K-Meleon forum is powered by Phorum.