Chromium Code Reviews Chromium Code Reviews
Issue 619463002:
net: disable SSLv3 fallback. (Closed)
Base URL: https://chromium.googlesource.com/chromium/src.git@master| Index: chrome/app/generated_resources.grd |
| diff --git a/chrome/app/generated_resources.grd b/chrome/app/generated_resources.grd |
| index fcbdb4b00d5dadb30c4cdbb572f183da2d898004..e4deca8cb81dc9a38a08c5ec555307c7d1ed59fd 100644 |
| --- a/chrome/app/generated_resources.grd |
| +++ b/chrome/app/generated_resources.grd |
| @@ -9206,6 +9206,16 @@ Keep your key file in a safe place. You will need it to create new versions of y |
| SSL protocol error. |
| </message> |
| + <message name="IDS_ERRORPAGES_HEADING_SSL_FALLBACK_BEYOND_MINIMUM_VERSION" desc="Heading in the error page for SSL fallback errors."> |
| + SSL server probably obsolete. |
| + </message> |
| + <message name="IDS_ERRORPAGES_SUMMARY_SSL_FALLBACK_BEYOND_MINIMUM_VERSION" desc="Summary in the error page for SSL fallback errors."> |
| + Unable to connect securely to the server. This website may have worked previously, but connecting to such sites has now been shown to cause security risks to all users and thus has been disabled your safety. |
|
davidben
2014/10/07 22:06:30
and thus has been disabled *for* your safety.
agl
2014/10/07 23:59:54
Done.
|
| + </message> |
| + <message name="IDS_ERRORPAGES_DETAILS_SSL_FALLBACK_BEYOND_MINIMUM_VERSION" desc="The error message displayed for SSL fallback errors."> |
| + An SSLv3 fallback was able to handshake with the server but we no longer accept SSLv3 fallbacks due to new attacks against the protocol. The server needs to be updated to support a minimum of TLS 1.0 and preferably TLS 1.2. |
|
davidben
2014/10/07 22:06:30
with the server*,* but we no longer
agl
2014/10/07 23:59:54
Done.
|
| + </message> |
| + |
| <message name="IDS_ERRORPAGES_HEADING_PINNING_FAILURE" desc="Title of the error page for a certificate which doesn't match the built-in pins for that name"> |
| Incorrect certificate for host. |
| </message> |
