globe www.lakelandhealth.org/lakeland-neurosurgery/disable-your-browser-support

Disable Your Browser Support

Disabling Browser Support for the SSL 3.0 and TLS 1.0 Protocol

Disabling browser support for SSL 3.0 and TLS 1.0 is required, and is a proactive way to combat the “POODLE” and “DROWN” vulnerabilities.

Note that disabling browser support for the SSL 3.0 protocol may stop you from connecting to sites that don’t support the TLS protocols, but access to Lakelands MyChart website requires TLS 1.1 or TLS 1.2 for the security of your information.

How to Disable Browser Support for the SSL 3.0 and TLS 1.0 Protocol

Depending on how your browser is configured, you need to disable SSL v3 and TLS 1.0, and enable TLS 1.1, and TLS 1.2 (if these protocols are not enabled by default). Note that older versions of Internet Explorer may not have the TLS 1.1 and 1.2 protocols in which case, you need to upgrade your browser to the latest version available.

  • Internet Explorer
  • Mozilla Firefox
  • Google Chrome

Internet Explorer: How to Disable the SSL 3.0 and TLS 1.0 Protocol

Although these instructions and screenshots are for Internet Explorer (IE) 10, they will work for other versions of IE.

  1. Open IE.
  2. In IE, click the Tools symbol (gear) and then, click Internet Options.ie-disabling-ssl-3.0-1
  3. In the Internet Options window on the Advanced tab, under Settings, scroll down to the Security section.

    ie-disabling-ssl-3.0-2

  4. In the Security section, locate the Use SSL and Use TLS options and uncheck Use SSL 3.0, uncheck Use SSL 2.0, and also uncheck Use TLS 1.0.

    ie-disabling-ssl-3.0-3

  5. If they are not already selected, check,Use TLS 1.1, and Use TLS 1.2.

    Note:    If not all the TLS options are available, just check the ones that are.

  6. Next, click Apply and then, click OK.

You have successfully disabled the SSL 3.0 and TLS 1.0 protocol in your IE browser.

 ­

Mozilla Firefox: How to Disable the SSL 3.0 and TLS 1.0 Protocol

Firefox is currently working on a new version of the Firefox browser in which the SSL 3.0 protocol support has been removed. If you don’t want to wait for that version to come out, you can use these instructions to turn off the SSL 3.0 and TLS 1.0 support, until the next version of Firefox is released.

Although these instructions and screenshots are for Mozilla Firefox 31, they will work for other versions of Firefox.

  1. Open Firefox.
  2. In the Location Bar, enter about:config and click the Go to the address in the Location Bar symbol (arrow).

    firefox-disabling-ssl-3.0-1

  3. When you receive the “This might void your warranty” message, click I’ll be careful, I promise!.

    firefox-disabling-ssl-3.0-2

  4. On the about:config page, in the Search box, enter tls and wait for the list to populate.

    firefox-disabling-ssl-3.0-3

  5. Next, in the list, double-click security.tls.version.min.
  6. In the Enter integer value window, in the security.tls.version.min box, type 2 to make TLS 1.1 the minimum required protocol version, and then click OK.

    firefox-disabling-ssl-3

  7. You have successfully disabled the SSL 3.0 and TLS 1.0 protocol in your Firefox browser.

 

Google Chrome: How to Disable the SSL 3.0 and TLS 1.0 Protocol

Google is currently testing a new version of Chrome in which the SSL 3.0 protocol support has been removed. If you don’t want to wait for that version to come out, you can use these instructions to create a shortcut that allows you to open chrome with the SSL 3.0 and TLS 1.0 support turned off, until the next version of Chrome is released.

Although these instructions and screenshots are for Google Chrome 38, they will work for other versions of Chrome.

  1. Locate the Google Chrome shortcut; typically, this shortcut is on your desktop.
    ii. Open the folder in which the Google Chrome application is located.
    For example: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chromegoogle-chrome-disabling-ssl-3.0-1ii. In the Google Chrome folder, right-click on the Google Chrome shortcut and then, click Create shortcut.google-chrome-disabling-ssl-3.0-2iii. In the Shortcut window, click Yes to create a shortcut on your desktop.google-chrome-disabling-ssl-3.0-3
  2. Right-click on the Google Chrome shortcut and then, click Properties.

    google-chrome-disabling-ssl-3.0-4

  3. In the Google Chrome Properties window on the Shortcut tab, in the Target field, add the following line to the existing Target:

    Add:--ssl-version-min=tls1.1 
    To:
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" 
    Make sure that you add a space between chrome.exe” and --ssl-version-min=tls1.1 
    "C:\Program Files (x86)\Google\Chrome\Application\chrome.exe" 
    --ssl-version-min=tls1.1

    google-chrome-disabling-ssl-3.0-5

  4. Next, click Apply and then, click OK.
  5. From now on (until Google releases the version of Chrome in which support for the SSL 3.0 protocol is removed), to open Google Chrome, you must use this shortcut.

    Whenever you use this shortcut to open Google Chrome, this instance of the Google Chrome browser will not support the SSL 3.0 or TLS 1.0 protocol.

  6. You have successfully disabled the SSL 3.0 and TLS 1.0 protocol in your Chrome browser.