From 43a97878ce14b72f0981164f87f2e35e14151312 Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Sun, 7 Apr 2024 11:22:09 +0200 Subject: Adding upstream version 110.0.1. Signed-off-by: Daniel Baumann --- l10n-be/suite/chrome/common/help/ssl_help.xhtml | 218 ++++++++++++++++++++++++ 1 file changed, 218 insertions(+) create mode 100644 l10n-be/suite/chrome/common/help/ssl_help.xhtml (limited to 'l10n-be/suite/chrome/common/help/ssl_help.xhtml') diff --git a/l10n-be/suite/chrome/common/help/ssl_help.xhtml b/l10n-be/suite/chrome/common/help/ssl_help.xhtml new file mode 100644 index 0000000000..ffd9c53d56 --- /dev/null +++ b/l10n-be/suite/chrome/common/help/ssl_help.xhtml @@ -0,0 +1,218 @@ + + + + + + %brandDTD; +]> + + + +SSL Settings + + + + +

SSL Settings

+ +

This section describes how to set your SSL preferences.

+ +
In this section: + +
+ +

Privacy & Security + Preferences - SSL

+ +

This section describes how to use the SSL preferences panel. If you are not + already viewing the panel, follow these steps:

+ +
    +
  1. Open the &brandShortName; + Edit menu and choose Preferences.
    2. +
  2. Under the Privacy & Security category, click SSL. (If no + subcategories are visible, double-click Privacy & Security to expand + the list.)
    3. +
+ +

SSL Protocol Versions

+ +

The Secure Sockets Layer (SSL) protocol + defines rules governing mutual authentication between a website and browser + software and the encryption of information that flows between them. It is + also used for secure communication in various other protocols, e.g., for + protection of sensitive information exchanged with email, calendar, or + directory servers. The newer Transport Layer Security (TLS) protocol is an + IETF standard based on SSL but with its own version numbering. TLS 1.0 can + be thought of as SSL 3.1, TLS 1.1 is in turn an update to TLS 1.0, etc. Newer + protocols are preferred over older ones as they provide better security and + more features. Older protocols are supported to ensure compatibility.

+ +

By default, &brandShortName; will select the most secure version which is + widely supported to connect to the server. If that attempt doesn't + succeed, it will try to connect with the next older version, etc., to the + extent allowed by the settings in this panel. The connection will fail if no + protocol supported by both sides is found. You can exclude older versions + explicitly or allow newer versions which may not be widely supported yet + with the following options:

+ + + +

Notes:

+ + + +

SSL Warnings

+ +

It's easy to tell when the website you are viewing is using an encrypted + connection. If the connection is encrypted, the lock icon in the lower-right + corner of the browser window is locked + (). If the + connection is not encrypted, the lock icon is unlocked + (). Encrypted + pages which contain some unencrypted items (mixed content) are shown with a + broken-lock icon + ().

+ +

If you want additional warnings, you can select one or more of the warning + checkboxes in the SSL preferences panel. Unless stated otherwise, a + notification bar will be presented at the top of the page triggering the + alert, with an option to enter this panel to change the option if the alert + is considered annoying.

+ +

To activate any of these warnings, select the corresponding checkbox:

+ + + +

Mixed Content

+ +

In general, there are two major issues related to transmitting sensitive + information over an unencrypted connection: One is the danger of someone + eavesdropping on the line, thus listening to the content transmitted; the + other of someone intercepting requests for the desired page and replacing + the legitimate content of that page with own (potentially malicious) + content. While so-called Man In The Middle attacks can usually be + detected in encrypted connections (e.g., by a certificate mismatch or an + invalid certificate presented by the interceptor), no such verification + exists for unencrypted connections.

+ +

The term Mixed Content refers to a web page which itself is + encrypted, but which includes content on the same or a different server + which is not encrypted. Consequently, this part of the page is + still subject to the vulnerabilities of an unencrypted line. While there + are legitimate uses of that concept (such as including a company logo from + a different insecure website into an otherwise secure page), such designs + should be avoided.

+ +

There are two general types of mixed content:

+ + + +

The following options allow you to be warned about and/or to block both + mixed active and mixed passive content:

+ + + +

For short definitions, click + authentication, + encryption, or + certificate.

+ +

For more information about ciphers and encryption, see the following online + documents:

+ + + + + -- cgit v1.2.3