views:

82

answers:

2

I am developing a FireFox extension when I do xhr to the Secure server , particularly POST a data it gives a status 500, and following mesage:

onsip.highrisehq.com : server does not support RFC 5746, see CVE-2009-3555

How can I by pass by It? I assume that this is because of the Server misconfiguration, but I can't wait till someone from 37 signal will fix it. thanks for your help

+1  A: 

Well - "see CVE-2009-3555". Basically it's a server side vulnerability which might allow to compromise a TLS/SSL session.

I'm not sure there's anything you can do on the client side to resolve this, until 37signals update their servers.

Yuval A
You're right. Due to the vuln, even the assumption "when I do xhr to the **secure** server" doesn't hold. Doing xhr, sure, but with whom?
MSalters