Error establishing encrypted connection to www.fastmail.com. Error Code: -8092

splustest · 20 Feb 2015, 04:30 AM

Started seeing this today. I know it wasn't there yesterday,
not sure if it worked earlier today. Restarted browser, same
thing. Rebooted machine, same thing. Linux, Firefox. Went
to a Windows XP, Firefox machine and was able to log in.
(Deleted cookies also on the Linux box.)

Anyone else?

robn · 20 Feb 2015, 07:24 AM

Yeah, we tried to update to a more secure encryption mechanism for some of the ciphers we support (specifically, a 2048-bit DH prime for DHE ciphers). We last tried this three years ago and it broke some iOS and Java clients. Apparently they're still in use, because I have five tickets this morning, and this report.

Change is reverted again, so it should be working for you.

I'm rather surprised you weren't able to connect with your choice of software. Was this an older Linux/Firefox setup?

splustest · 20 Feb 2015, 10:33 AM

Yes, older. Too old to update - at least the messages I get when I have tried imply that, but my primary system where all my important files, etc, are.

splustest · 30 Mar 2015, 11:24 AM

Was working earlier today.

robn · 30 Mar 2015, 11:45 AM

http://blog.fastmail.com/2015/03/13/...-to-2048-bits/

Basically, previous change was rolled back for a few weeks to give people time to prepare. Now its official.

Either upgrade your client, or use insecure.fastmail.com.

splustest · 30 Mar 2015, 11:49 AM

How do I use insecure fastmail? I close my browser,
open it, go to "emailplus.org", and after accepting
the www.fastmail.com certificate, I immediately get
the error message.

robn · 30 Mar 2015, 11:55 AM

https://insecure.fastmail.com/

But please do understand, this site allows the use of many encryption mechanisms that are known to be trivial for an attacker to penetrate. Your connection to FastMail IS NOT SECURE if you use this site, thus the name.

Upgrading your browser is the better option in every conceivable way. Only use this if that is absolutely impossible.

(This should show you just how broken insecure.fastmail.com is. Even if you don't understand the details, the number of red things on the page should make it clear:

https://www.ssllabs.com/ssltest/anal...&s=66.111.4.66

splustest · 30 Mar 2015, 12:03 PM

Have not had a problem with Fastmail for at least 12 years
and it is not possible to update as I stated before. I'll have
to live with insecure.

adamlau · 30 Mar 2015, 03:02 PM

Not able to update a *nix to support a more recent version of Firefox + CA cert package? Is your current distro no longer being maintained? Over fifteen years working with Sun OS 5/Solaris/FreeBSD/Linux here. There are definitely ways to move forwards.

20 Feb 2015, 04:30 AM	#1
splustest Senior Member Join Date: Apr 2003 Posts: 164	Error establishing encrypted connection to www.fastmail.com. Error Code: -8092 Started seeing this today. I know it wasn't there yesterday, not sure if it worked earlier today. Restarted browser, same thing. Rebooted machine, same thing. Linux, Firefox. Went to a Windows XP, Firefox machine and was able to log in. (Deleted cookies also on the Linux box.) Anyone else?

30 Mar 2015, 11:24 AM	#4
splustest Senior Member Join Date: Apr 2003 Posts: 164	Happening again Was working earlier today.

20 Feb 2015, 07:24 AM	#2
robn Master of the @ Join Date: May 2012 Location: Melbourne, Australia Posts: 1,007 Representative of: Fastmail.fm	Yeah, we tried to update to a more secure encryption mechanism for some of the ciphers we support (specifically, a 2048-bit DH prime for DHE ciphers). We last tried this three years ago and it broke some iOS and Java clients. Apparently they're still in use, because I have five tickets this morning, and this report. Change is reverted again, so it should be working for you. I'm rather surprised you weren't able to connect with your choice of software. Was this an older Linux/Firefox setup?

20 Feb 2015, 10:33 AM	#3
splustest Senior Member Join Date: Apr 2003 Posts: 164	Yes, older. Too old to update - at least the messages I get when I have tried imply that, but my primary system where all my important files, etc, are.

30 Mar 2015, 11:45 AM	#5
robn Master of the @ Join Date: May 2012 Location: Melbourne, Australia Posts: 1,007 Representative of: Fastmail.fm	http://blog.fastmail.com/2015/03/13/...-to-2048-bits/ Basically, previous change was rolled back for a few weeks to give people time to prepare. Now its official. Either upgrade your client, or use insecure.fastmail.com.

30 Mar 2015, 11:49 AM	#6
splustest Senior Member Join Date: Apr 2003 Posts: 164	How do I use insecure fastmail? I close my browser, open it, go to "emailplus.org", and after accepting the www.fastmail.com certificate, I immediately get the error message.

30 Mar 2015, 11:55 AM	#7
robn Master of the @ Join Date: May 2012 Location: Melbourne, Australia Posts: 1,007 Representative of: Fastmail.fm	https://insecure.fastmail.com/ But please do understand, this site allows the use of many encryption mechanisms that are known to be trivial for an attacker to penetrate. Your connection to FastMail IS NOT SECURE if you use this site, thus the name. Upgrading your browser is the better option in every conceivable way. Only use this if that is absolutely impossible. (This should show you just how broken insecure.fastmail.com is. Even if you don't understand the details, the number of red things on the page should make it clear: https://www.ssllabs.com/ssltest/anal...&s=66.111.4.66

30 Mar 2015, 12:03 PM	#8
splustest Senior Member Join Date: Apr 2003 Posts: 164	Have not had a problem with Fastmail for at least 12 years and it is not possible to update as I stated before. I'll have to live with insecure.

30 Mar 2015, 03:02 PM	#9
adamlau Senior Member Join Date: Jun 2006 Posts: 161	Not able to update a *nix to support a more recent version of Firefox + CA cert package? Is your current distro no longer being maintained? Over fifteen years working with Sun OS 5/Solaris/FreeBSD/Linux here. There are definitely ways to move forwards.