WordPress.org

Make WordPress Core

Opened 6 years ago

Closed 6 years ago

#27607 closed defect (bug) (invalid)

Can't access some WordPress.com blogs, after disabling RC4 and AES-128

Reported by: Ryuno-Ki Owned by:
Milestone: Priority: normal
Severity: normal Version: 3.8
Component: Security Keywords:
Focuses: Cc:
PR Number:

Description

First, this is no security issue as stated in that Security FAQ, since it does not involve instructions to "hack" a blog.

Steps to reproduce:

Follow the tipps by Martin Grässlin as stated here:
http://www.bitblokes.de/2013/09/security-tipp-von-mr-kwin-martin-graesslin-firefox-sicherer-machen/

that is, disabling RC4 and AES-128 keys in Firefox' about:config (Fx v26-v28). The problem occurs on Sabayon Linux 64Bit and Ubuntu.

$ uname -a
Linux linux.local 3.13.0-sabayon #1 SMP Sun Mar 16 03:29:10 UTC 2014 x86_64 Intel(R) Core(TM)2 Duo CPU P8600 @ 2.40GHz GenuineIntel GNU/Linux

Expected behaviour

WordPress.com delivers content with higher encryption transport activated.

Actual behaviour

Some WordPress.com blogs aren't reachable anymore. Surfing on them raises an page load error (Connection refused).
A reset to default values does not fix the issue. Only WordPress.com blogs are affected. However, after upgrading Firefox to v28 I can reach at least some WordPress.com blogs again.
I've already cleared cache and cookies with no effect.

Change History (1)

#1 @SergeyBiryukov
6 years ago

  • Milestone Awaiting Review deleted
  • Resolution set to invalid
  • Status changed from new to closed

This should be reported to WordPress.com: http://en.support.wordpress.com/contact/.

Note: See TracTickets for help on using tickets.