I recently visited https://www.howsmyssl.com/ with TorBrowser Bundle 3.5 and the rating was alarming. In particular, the site informed me that the cipher SSL_RSA_FIPS_WITH_3DES_EDE_CBC_SHA was insecure and that TLS 1.0 was also a risk. I realize that customizing the browser in any way diminishes my anonymity by increasing my fingerprint, but I would prefer more secure SSL over improved anonymity. What are my options to improve this ?
One possible solution is to disable the offending cipher by visiting
You could also improve your security by allowing TLS1.1 and 1.2 which are disabled by default in Firefox:
See my blog post on the topic for more info (and for why this isn't the default).
Always keep in mind that sites like How's my SSL are useful tools, but that there might be other consequences (aside from fingerprinting) that aren't immediately obvoius.
The site is not quite right about the
When you want to disable it, enter
As Sam wrote you should also raise the enabled TLS versions. Just enter
I played around with the minimum version in Firefox. When setting the minimum to 2 (TLS1.1) some websites break. I collected some sites, but probably there are many more. So at the moment it might be good to set the minimum value to 1.