Search code examples
sslmozillasslv3

mozilla browser behaviour wrt sslv3


What i have read and understood is that most of the browsers today when establishing a secure connection try TLS first and if the connnection is not made they fallback on SSL v3.

Now consider the following scenario: I access a website over HTTPS, this website has stopped support for SSL v3. First secure connection attempt of my mozilla browser using TLS fails by chance and it falls back on ssl v3. The website does not support ssl v3 so this attempt also fails What happens now: Would my browser give me error saying connection not possible OR Will it again go bback to trying TLS for setting up connection.


Solution

  • The browser will not immediately start again with a higher TLS version if the downgrade to a lower version failed, but it will simply give you an error that the connection failed - same as the browser would do if it did not do any downgrades. But the next time you try to connect to the site it will probably retry with a high TLS version again, because it did not have any cached information that it will be successful after downgrade only.