From Fedora Project Wiki
Description
Using Firefox with crypto-policies
How to test
We will try some basic stuff with Firefox. Attention: You need updated nss-3.29.3-1.3.fc2 because of bug
- Visit ssllabs site with different profiles (LEGACY, DEFAULT, FUTURE - use
update-crypto-policies --set PROFILE
to switch them) - Try sites using exclusively RC4 ciphers, 3DES ciphers, and modern ciphers using different profiles
Expected Results
- roughly speaking:
- FUTURE should allow only TLSv1.2
- DEFAULT should also allow 3DES ciphers
- LEGACY should also allow RC4 ciphers
- RC4 should be accessible only with LEGACY, 3DES also with DEFAULT and modern also with FUTURE.