TLS 1.1 Minimum Now Requires To Access Community forums?

[berserkerplanet]

Was there an unannounced change to the forums in the last 48 hours or so requiring a browser to use a TLS 1.1 minimum protocol ?

FireFox 3.6 is dead in the water and that appears to be the reason.

[loveyourimagination49]

Sorry for my ignorance, are you referring to this?
https://blog.pcisecuritystandards.org/are-you-ready-for-30-june-2018-sayin-goodbye-to-ssl-early-tls

[berserkerplanet]

Yep, except that reading the community forums has nothing to do with credit card security - particularly when not logged in.

I find it ironic that I can still do my eBay, PayPal, Amazon, and other financial business using Firefox 3.6.24 with only TLS1.0, and much of eBay isn't even HTTPS, yet I can't even connect to the community forums now. It looks like someone flipped a switch - that's what I would like to have verified.

As with all the other things eBay, there was no announcement that I've seen. (That change is going to lock out older iPhones, other phones stuck with older browsers, and older IE and other browser versions, along with my treasured FF3.6.24)

[doug@ebay · Accepted solution]

Hi @berserkerplanet, support for TLS 1.0 was disabled in the Community in January based on requirements from eBay IT and Lithium.  TLS 1.1 and 1.2 are still supported. We recommend using the latest version of your browser, and FireFox 3.6 is very outdated (https://www.mozilla.org/en-US/firefox/releases/).

For the best possible experience, we recommend using one of the following browsers, 

unless otherwise stated, browser versions reflect the latest stable release version:

Desktop Browsers
Windows (Version 7+)

Chrome

Firefox

Internet Explorer 11

Microsoft Edge

Mac (Version 10.11+)

Safari
Chrome
Firefox

Mobile Browsers
Android (Version 4.4+)

Chrome

iOS (Version 10+)

Safari

From Lithium documentation:

"Early in 2017, we will be shifting away from the dated Transport Layer Security (TLS) 1.0 protocol to meet industry standards. TLS 1.0 is not as secure as other available options and is no longer supported by the major browser providers. If your community uses TLS 1.0, review your client-side setup to ensure you’re using the latest version of TLS to avoid any potential complications from the protocol being sunset with this release. With the end of support for TLS 1.0, we no longer support the Internet Explorer 10 browser. If you have any questions, contact Lithium Support."

---

wrote:

Was there an unannounced change to the forums in the last 48 hours or so requiring a browser to use a TLS 1.1 minimum protocol ?

FireFox 3.6 is dead in the water and that appears to be the reason.

---

[chrysylys]

---

doug@ebay wrote:

For the best possible experience, we recommend using one of the following browsers,

---

So, how's your trial of SeaMonkey going?

It's still the very best of the best for many of us.