Cable Forum

Cable Forum (https://www.cableforum.uk/board/index.php)
-   General IT Discussion (https://www.cableforum.uk/board/forumdisplay.php?f=19)
-   -   secret key size not big enough. Halifax website. (https://www.cableforum.uk/board/showthread.php?t=6114)

Nutty 08-01-2004 18:29

secret key size not big enough. Halifax website.
 
HI.

My missus uses the Halifax online banking stuff. N.B. Their servers went down few days ago.

Anyway, today she tried to get on, and she's getting this.

Quote:

Insufficient encryption
This document requires a larger secret key size for encryption than your browser is capable of supporting.
Forbidden
The proxy's access control configuration denies access to the requested object through this proxy.
I'm on 1Mbit NTL. No proxy is listed in my connection options. I'm using M$ IE 6. My cipher strength is 128bit.

Anyone any idea what todo about this. The only thing I've done recently is install M$ Visual Studio 6 (Programming development thing) though I doubt that would've altered any internet stuff.

Is it ntl's proxies being naff, or my problem?

cheers,

Sociable 08-01-2004 18:32

Re: secret key size not big enough. Halifax website.
 
Looks like the problem is the "transparent" proxy being automatically assigned is misbehaving so the solution may be to nominate a different one.

Which area are you in so someone can suggest a better one to use for your area?

threadbare 08-01-2004 18:41

Re: secret key size not big enough. Halifax website.
 
proxies dont cache secure websites

darkangel 08-01-2004 18:44

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by threadbare
proxies dont cache secure websites

no no i think you mean their not supposed to..rember it's ntl

threadbare 08-01-2004 18:53

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by darkangel
no no i think you mean their not supposed to..rember it's ntl

very funny :D

secure connections are transmitted on a different to port to normal web traffic

iadom 08-01-2004 19:10

Re: secret key size not big enough. Halifax website.
 
I use Halifax, just logged on to my portfolio without a problem. Using 600kBB IE6 and 128 bit encryption.

Paul 08-01-2004 20:22

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by Nutty
Anyone any idea what todo about this. The only thing I've done recently is install M$ Visual Studio 6 (Programming development thing) though I doubt that would've altered any internet stuff.

Is it ntl's proxies being naff, or my problem?

cheers,

It's not the proxies, they don't intecept SSL traffic - but it is quite possible that VS6 has installed an old dll somewhere - I suggest re-installing IE6.

blackthorn 08-01-2004 20:31

Re: secret key size not big enough. Halifax website.
 
I know its no help to your problem but I use the Halifax website and i can log on to my acount ok. 600k and IE6

Nutty 08-01-2004 20:51

Re: secret key size not big enough. Halifax website.
 
I'm the Solent reagion btw.

How do I re-install IE6. It was kinda just an upgrade to the IE that comes with windows.

philip.j.fry 08-01-2004 20:51

Re: secret key size not big enough. Halifax website.
 
Visual Studio 6 used to come with IE5.5, could it be possible that it has regressed your browser back to 5.5 and removed the 128K compatibility?

Sociable 08-01-2004 20:58

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by Nutty
I'm the Solent reagion btw.

How do I re-install IE6. It was kinda just an upgrade to the IE that comes with windows.

Re download the IE6 SP1 setup from here Nutty:

http://www.microsoft.com/downloads/s...displaylang=en

Nutty 08-01-2004 21:30

Re: secret key size not big enough. Halifax website.
 
I've already done that. Windows update is broken also. It seems my SSL component of windows is broken, just need to find out how to fix it. Prolly have to do re-install or something.. :(

Paul 08-01-2004 22:21

Re: secret key size not big enough. Halifax website.
 
The url of the setup file is ;

http://download.microsoft.com/downlo...S/ie6setup.exe

Nutty 08-01-2004 22:30

Re: secret key size not big enough. Halifax website.
 
Well I figured if I re-installed a new browser it should setup the SSL. I installed Mozilla, and I can now get to the halifax login page, so SSL is now working on that. I'll reboot and try the windows update thing to see if thats fixed.

Sociable 08-01-2004 22:32

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by Nutty
I've already done that. Windows update is broken also. It seems my SSL component of windows is broken, just need to find out how to fix it. Prolly have to do re-install or something.. :(

Check out this post from Robin Walker Nutty as SSL is causing other problems so this could be linked to the issue with "Word" and Norton in the other thread.

http://forum.nthellworld.co.uk/showp...13&postcount=8

Stuartbe 09-01-2004 07:38

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by threadbare
proxies dont cache secure websites

I am sure that they dont but they must route them !!! Put one of the ntl proxy servers in the https proxy field - most users have (use the same proxy for all types ect) ticked anyway.

If the proxy's ignore https traffic then you would get a page cant be displayed error if this proxy is set and you visit a secure site !!!

Perhaps rdhw can confirm......

threadbare 09-01-2004 07:51

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by stuartbe
I am sure that they dont but they must route them !!! Put one of the ntl proxy servers in the https proxy field - most users have (use the same proxy for all types ect) ticked anyway.

If the proxy's ignore https traffic then you would get a page cant be displayed error if this proxy is set and you visit a secure site !!!

Perhaps rdhw can confirm......

proxies intercept port 80

https traffic routes thru port 443

edit: if a user is specifying secure traffic to go thru a proxy then they shouldn't!

Stuartbe 09-01-2004 07:53

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by threadbare
proxies intercept port 80

https traffic routes thru port 443

So if the proxy is routing the trafic we have another bottleneck and weakness in the network. Maybe we should recomend that users only have http set in the proxy options and clear the others.

altis 09-01-2004 08:02

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by philip.j.fry
Visual Studio 6 used to come with IE5.5, could it be possible that it has regressed your browser back to 5.5 and removed the 128K compatibility?

IE5.5 has 128 bit security ;)

threadbare 09-01-2004 08:05

Re: secret key size not big enough. Halifax website.
 
Quote:

Originally Posted by stuartbe
So if the proxy is routing the trafic we have another bottleneck and weakness in the network. Maybe we should recomend that users only have http set in the proxy options and clear the others.

yes definately - specifying other traffic thru proxies can only be done in advanced settings

I dare say that few users would go in here

they probably just specify the proxy for port 80 or 8080 in the LAN settings, which is fine

Nutty 09-01-2004 18:42

Re: secret key size not big enough. Halifax website.
 
Quote:

Check out this post from Robin Walker Nutty as SSL is causing other problems so this could be linked to the issue with "Word" and Norton in the other thread.
Cheers, very interesting. My NAV has been taking a while to load, and going weird.. but I dont think thats the problem.

In the process of faffing on with IE I've broken Outlook Express. Heh, you wouldn't think I was a computer professional! :)

format c: /y !!!!!!! :rolleyes:

Frank 09-01-2004 19:00

Re: secret key size not big enough. Halifax website.
 
Nutty look in the advanced options by the proxy box and check that https isn't going thru a proxy.

greencreeper 09-01-2004 19:40

Re: secret key size not big enough. Halifax website.
 
Check IE's Security and Advanced settings for anything wacky. Make sure SSL 2.0 and 3.0 are ticked, for example.

Nutty 09-01-2004 23:32

Re: secret key size not big enough. Halifax website.
 
I'd set them all to defaults.. my comp was screwed. I've already re-formated now, and am wading through the massive amount of patches from M$. :)


All times are GMT. The time now is 00:39.

Powered by vBulletin® Version 3.8.11
Copyright ©2000 - 2026, vBulletin Solutions Inc.
All Posts and Content are © Cable Forum