Netscape 6 and Secure Servers

[tedster]

I just checked out the "known problems with Netscape 6" section of the Netscape website ... I'm hoping they'll come through with some real fixes (dream on?).

At any rate, since many forum members mentioned problems with various secure sites, I thought this quote from Netscape might be helpful.

Some secure (https) web sites are not TLS compatible. TLS is the new version of SSL. If you are having trouble reaching a particular secure web site, try turning off TLS for that site:

1. Open the Tasks menu, choose Privacy and Security, and then choose Security Manager.
   
2. Click the Advanced tab.
   
3. Click Options.
   
4. Turn off TLS.
   

Netscape 6 may not be able to connect to some secure (https) IBM web servers. This is a problem with the servers' software, not with Netscape 6.

If any forumites would like more information about Transport Layer Security (TLS) it's available at the Internet Engineer Task Force [ietf.org] Site.

[gmiller]

On a closely related note, the version of PSM (which handles SSL for Mozilla) that was included in the NS6 release is no longer current.

The current release is available from:
[docs.iplanet.com...]

Mozilla nightly builds include freshly built PSM as well. Mozilla 0.7 probably includes PSM 1.3 or 1.4, but I haven't downloaded it to see.

[Mike_Mackin]

A Macintosh binary will be available from this page soon.

Then I can trash MSIE maybe.
Hate the sound when outlook opens.

[GWJ]

Just a tidbit. On the server you can locate schannel.dll (This is for Windows NT/2000 only). You can then click on it and view properties. On Windows 2000 it reports version number and if it is TLS/SSL or just SSL.

Brian

[tedster]

BugNet [bugnet.com] picked the secure site problems with NN6 as their number one bug for the new browser.

They refer to Iplanet [docs.iplanet.com] to download a missing module in the Personal Securty Manager, and this patch apparently handles some of the issues.

[later addition]
Just noticed that gmiller's post up above gives the same information. Took me a while to notice that PSM means Personal Security Manager -- time for some coffee, I'd say.

[tedster]

In February, Netscape posted a page of "known issues" with versions 6.0 and 6.01. The security issues are discussed here [home.netscape.com].

Included are some security issues pertaining to the Linux version, and this note, which I consider very important for users to understand:

"The lock icon will appear closed (secure) on web sites that contain a mixture of secure and insecure content. This is because lock indicates whether the basic page arrived via SSL. It does not indicate that all images and other sub-content on the page are transmitted to the via SSL, and it is the responsibility of the web site to protect the user on this level."

[gmiller]

The problem with mixed secure/unsecure content resulted from an architectural problem in PSM 1.x... As a result, the fix won't be available until PSM 2.0 lands, probably the second half of April.

[Jim_Powell]

Netscape 6 and secure pages ...unbelievable.

Turning off TLS did not even help. I'm using PSM verion 1.41 ....

To see for yourself ...try going to this website with this URL [prd2p.it.state.wi.us...]

That link allows you to check on your income tax refund ..for Wisconsin only. It won't display in Netscape 6 and this page is on our mainframe.

Netsape Corp messed up.

jp

[gmiller]

Are you absolutely sure SSL is the problem?

In any event, I'm glad to say I've never actually run into an SSL page that wouldn't work on NS6. I just wish PSM 1.x wasn't so SLOW.