Thanks everyone - @jsnj -- setting the UA to FF (3.5) works like a charm. But now I am really confused :s @JamesD -- I know I asked if there's any way future versions of KM could be made or persuaded to not throw an error in these cases, but it seems this is part of the Gecko engine, and probably beyond the reach of our devs. And believe me, the error in question -- actually all well
Forum: Bugs

In https://supersitenewmss.superpartners.com.au/Login.aspx?FundCode=CBUS (it's OK, you don't need to actually log in!!!) at line 168 we find an element closing tag </p--> within a <div>. There is no start tag <p-->, and given these two factors KM 1.6.0b2 spits the dummy, chucks a wobbly and throws an immediate fatal error as required by the XHTML standards: QuoteWh
Forum: Bugs

This behaviour only happens with K-M 1.6.0b2. It doesn't happen with 1.5.4, QtWeb, or Opera 11.51. I didn't bother with IE6 Because I don't expect anybody to have an account with Virgin Mobile AU http://www.virginmobile.com.au/, I've provided page listings EmailUs, AreYouCustomer, LogIn, FourOhFour as text files, plus s_CodeJS which is used by everything except FourOhFou
Forum: Bugs

QuoteMozilla Silent Update page...we want to ensure everyone is on the latest version of Firefox Of course all FireFox will work on older OSs :O ROFL LMAO My mum always told me "If you can't say anything nice, don't say anything." ^-zip-^ Gordon.
Forum: Other custom builds

Hi syncopator - You may also want to look at F2 (Preferences)>Browsing>>Window Diversion>>Popup Window Diversion and choose "Treat the request as if it originated...". Certainly my 1.5.4 (which I rarely use these days, 1.6.0b2 is better!) handles target=_blank properly with tabs disabled. Gordon.
Forum: General

QuoteJamesDI thought as long as the lock was closed, I was OK. If the URL bar is red and the lock is broken, that means there is not a good handshake for encryption - right? No. See my post earlier in this thread. Always make sure you have amber in the URL bar, not red. You can check what the problem is by checking "Warnings When viewing a page with an encrypted/unencrypted mix"
Forum: General

QuoteJamesD If I then mark "false" all of the crypto items in configuration except the RC4 items, would I not have TLS 1.0 with non CBC? Is that not the goal? We-e-e-lll... QuoteWikipediaAt http://en.wikipedia.org/wiki/RC4#Security : However, many applications that use RC4 simply concatenate key and nonce; RC4's weak key schedule then gives rise to a variety of serious proble
Forum: General

QuoteJamesD I have a broken padlock. The broken padlock can also mean the page is mixed, containing secure and non-secured items. In Prefs>Privacy & Security>Encryption>>Encrypted Transmission check "Warnings When viewing a page with an encrypted/unencrypted mix". Gordon.
Forum: General

Quote...could we solve this issue disabling all algorithms in KMeleon setting to "false" all ssl3 entries that exist in the registry but the RC4 ones? Unfortunately, no. Problem is that while our computers and OSs might support current technology like TLS 1.1 and 1.2, most websites are stuck in last decade, maybe last century. Very few servers can do better than TLS 1.0, which is al
Forum: General

QuoteBTW The home-page of my bank for example has a time out after 12 minutes inertia. We'll leave good banking practice out of this please I'm in Australia and we're so pleased we've finally got EMV chips on our credit cards :cool: -- and even then we still have the magnetic strips! :s >2.) To which FF/SM implementation of TLS 1.1 or better are You referring? I was pr
Forum: Bugs

Ummmm... Some background: QuoteWikipedia "Transport Layer Security"TLS 1.0 was first defined in RFC 2246 in January 1999 as an upgrade to SSL Version 3.0. As stated in the RFC, "the differences between this protocol and SSL 3.0 are not dramatic, but they are significant enough that TLS 1.0 and SSL 3.0 do not interoperate." TLS 1.1 and 1.2 both defeat the BEAST. You'
Forum: Bugs

Thanks for that guenter. I think we do have a bug: QuoteError ConsoleError: Component returned failure code: 0x80004005 (NS_ERROR_FAILURE) Source file: chrome://pippki/content/device_manager.js Line: 545 I'm on my way to reporting it now, will edit to leave bug#. ________________Bug 1337. Gordon.
Forum: Bugs

I've tried to enable FIPS in KM 1.6.0b2. The first thing I did was a little research. I found Configuring Firefox for FIPS 140-2 which is an old page, but FF doesn't say how old. ¬_¬ So I followed instructions, gave myself a master password, disabled SSL3 (Privacy & Security>Encryption>>Encrypted Transmission), then Privacy & Security>Encryption>>Prote
Forum: Bugs

TSL hackers break SSL encryption FireSheep extension Given that many sites do not routinely use HTTPS, can we have something like the ForceTLS FF addon? I have always assumed that KM 1.6.0 supports TLS1.2, but when the site doesn't use security we're still shafted. We don't need too many bells and whistles in such a feature: Quoteguenter at http://kmeleonbrowser.org/forum/
Forum: Improvement requests

QuoteMeans if I knew more I'd simply try to force the highest possible TSL version that a page supports when needed. I would not bother with the extension's list or any other added option like privacy mode. I totally agree. No point in doing unnecessary work. :cool: I think I'll raise this in the Improvement Requests. I assume KM does support TLS1.2/SSL3.3? Gordon.
Forum: General

Hi guenter - >How do You know that it can be hacked? :s Anything can be hacked -- but if you use the wrong axe... :O >It uses AFAIK a sqlite database... Yes, but that appears to be dynamic: this._mDBConn.executeSimpleSQL("CREATE TABLE IF NOT EXISTS ftls " + "(host string, " + &qu
Forum: General

@margarita - Ummm... No. OTOH, there is force_tls-3.0.0-fx.xpi which ATM only fits FF, but can be hacked to work with KM. Trouble is, I don't know how. Gordon.
Forum: General

QuoteguenterTo me the interface of e.g. Force TLS looks pretty much like the self contained XUL-Window type that we use in a number of other K-Meleon ports. Guenter, what do we need to do to the XUL to make this fit KM? And it looks like one or two other things may need hacking... Gordon.
Forum: General

Hi guenter - Thanks for that. After looking more closely I suspected that's all we can do. QuotedeadlockYou can provide a patch for users or build a GRE without those 200 certs The full list is here. We should also disable Comodo CA, and enquire closely from Mozilla about its certificate. This is beginning to look like "Nightmare on Elm St" At the moment I must go
Forum: Bugs

OK. The definition of "paranoia" is "eternal vigilance". Now you understand why I'm posting. Given that at least two CAs have been penetrated (yes, yes, I know the Comodo hack was "only" a reseller...), and the opinion of many is that the Certificate system is at least badly bent: How do we remove suspect root certificates? Specifically, I can't de
Forum: Bugs

http://arstechnica.com/security/news/2011/09/comodo-hacker-i-hacked-diginotar-too-other-cas-breached.ars Gordon.
Forum: Bugs

Hi guenter - QuoteguenterIt edited & used mimetypes.rtf, was hard to use and could add new items. I'm not surprised few people used it. Most don't need to as most times the default set is sufficient, and they probably don't really know what a mime-type is. And of course, if you don't know what a mime-type is, how are you going to use the editor? (To be honest, I don&
Forum: Development

Thanks all of youse. @JujuLand - your 1.5.4 trick works perfectly!!! At least, so far. I still have 1.5.4 as a backup, sort of, so create the Excel entries there, open the mimeTypes.rdf in PSPad -- Unix line endings, UTF-8 -- select and copy to mimeTypes.rdf in my 1.6.0 profile, same settings. @guenter - I've downloaded rvjmimeedit.7z, and will suss it out. Why do we need to d
Forum: Development

Unfortunately, as far as I can see that's about all we can do. But that only removes one (almost certainly needed and essential) mimetype to give me a new one. I think. :s I've never tried it. I did take a Cap'n Cook through the various "mtype" and "mimeType" files, but that's going into hairy places... It would be better to have an "Add" b
Forum: Development

Is there any way we can add MIME-types to KM? It would be really nifty (not to say "crufty") if we could tell KM to open the application/x-ms-excel in the free Excel Reader! Gordon.
Forum: Development

Hi Vala - You need to download the missing installer from http://archive.msdn.microsoft.com/KB932298/Release/ProjectReleases.aspx?ReleaseId=762. Or you could download mfc71u.dll, msvcp71.dll and msvcr71.dll from http://www.dll-files.com/dllindex/index-m.shtml. Put these three in your KM folder. Gordon.
Forum: Bugs

Hi phenix - Rest assured Windows is doing what you told it. :O The IP shown for FreeStaffWorld is "localhost", that is, your computer. The good news is all that happened was WMP wasted a bit of your computer time. I only have W2K, didn't know WMP has a network sharing service -- it must be in WMP10+. Anyway, what siria said is good: at the very least set it to "Manual
Forum: General

QuoteJamesD What version of KM are you using? Some sites don't display well in older KM versions. I have found the the KM 1.6.0 beta2 updated with the '.20' GRE will display most sites correctly. It's always displayed perfectly in 1.6.0b2... (Mozilla/5.0 (Windows; ; Windows NT 5.0; en-US; rv:1.9.1.17pre) Gecko K-Meleon/1.6.0) All I have is upgraded certificates, but that
Forum: Bugs

Hi phenix - Lovely! And that explains why www.freestuffworld.com didn't look like your image! :s Now, to make the hosts (it really is the plural, 'cos it lists all the host IPs!) work for you, that is to make freestaffworld never come back, we have to tell your browser to look inside the computer. There is a special IP for this, 127.0.0.1, which is called localhost. So, first
Forum: General

QuoteI will try the "Hostsman" as I am leary of messing around with the registry. Wise idea. QuoteThe address in Windows 7 Pro is different than what you stated. I didn't. Microsoft and Brighthub did. Do you have a 64-bit machine? Look in Brighthub for the correct address. And if you do have a 64-bit machine, it's always worth telling us, because things work differ
Forum: General