View source for Cannot connect securely because the site uses an older insecure version of the SSL protocol

{{right-pic|Ssl2 disabled.png}}

This article deals with a message about a ''Mozilla application not being able to connect securely to (site name) because the site uses an older, insecure version of the SSL protocol'' when trying to browse to certain web sites or connect to certain servers. For information on other messages received when accessing secure sites, see [[Error loading secure sites]].

The message is shown because support for version 2 of the SSL protocol (SSL2) is disabled by default in recent versions of Firefox, Mozilla Suite, and Thunderbird. Its insecure and rarely used since it was deprecated in 1996. Its been replaced by version 3 of the SSL protocol (SSL3) and [http://en.wikipedia.org/wiki/Transport_Layer_Security TLS]. 

If you have to use SSL2 for a specific web site or server you can enable it as follows:

'''Firefox, SeaMonkey/Mozilla Suite:'''
{{EditPrefBool|security.enable_ssl2|true}}

You may also need to enable specific ciphers. Still in about:config, enter <tt>ssl2</tt> into the filter box and enable the ciphers presented.[http://forums.mozillazine.org/viewtopic.php?t=478336]

'''Thunderbird:'''

# Tools -> Options -> Advanced -> General -> Config Editor
# Type ssl2 in the edit field at the Filter: prompt 
# Find the row with security.enable_ssl2
# Double click on it to set it to true.

You will also need to enable some of its ciphers (such as security.ssl2.des_64 and security.ssl2.rc4_128) by double clicking on them.

[[Category:Issues (Firefox)]]
[[Category:Issues (Mozilla Suite)]]
[[Category:Issues (Thunderbird)]]
[[Category:Privacy and security]]
[[Category:Websites]]