Insecure browser wanted

[WinstonWolf]

Support for older TLS protocols has now been pretty much dumped but I occasionally need to manage old kit that doesn't support the newer protocols. Does anyone know of a browser that has a "fk it I don't care" mode that'll allow me to connect to the old kit?

It'll only ever be used to manage old printers etc. on internal networks, security isn't an issue.

[Zoon]

Can you setup a VM with winxp or something and bung an old browser on there?

[WinstonWolf]

I'd rather avoid that if I can as it's a bit of a palaver and I'd need to replicate it across multiple sites. A typical example would be an old Canon scanner when the address book needs updating.

[TameRacingDriver]

Internet Explorer surely can’t be secure these days

[WinstonWolf]

It's secure enough to prevent me maintaining this old kit

[eybic]

I've seen warnings on chrome about insecure sites but there is a "continue anyway" option, might not be insecure enough for you though???

[deggles]

It's harder than you think in today's auto-self-updating world

I've had some success downloading older versions of Chromium (basically Chrome, without the Google proprietary stuff). I'm not sure how far back you'd have to go for TLS 1 support though.

https://www.chromium.org/getting-involved/download...

[jeremyc]

Directory of old Firefox releases

Back to 0.10 (we're now on 72.0.1 ).

I suspect you can find one that is insecure in that lot somewhere.

[AmosMoses]

I used portable versions of old Firefox releases, there's a few links on the web for these.

[WinstonWolf]

eybic said:

I've seen warnings on chrome about insecure sites but there is a "continue anyway" option, might not be insecure enough for you though???

They've switched it off in the latest version

[WinstonWolf]

jeremyc said:

Directory of old Firefox releases

Back to 0.10 (we're now on 72.0.1 ).

I suspect you can find one that is insecure in that lot somewhere.

I went back to V55, I probably need to go back a lot further

[Corso Marche]

You'll probably be able to install a second instance of IE and get away with it, V8 or V9 for example, without upsetting the existing IE installation or any other installed browsers.

[rfisher]

Blackberry Playbook has non TLS browsers a plenty.

Best one is Origami.

I still use it for browsing.

I also have several never used 64Gb Playbooks which I'm planning on selling to the British Museum in 100 years (not personally, obviously).

[bmwmike]

Can you stick a reverse proxy in front of the whatever it is and beef up the TLS that way?

Or perhaps some of the current browsers have command line switches / config to allow specific ciphers.

[TameRacingDriver]

Try and find a copy of Netscape navigator for some retro goodness

[SBDJ]

As above, I used a portable version of Firefox for this - some networking kit is rubbish for this. Kept two instances - a v24 and a current version - for this purpose.

v55 is far too recent!

[mmm-five]

I believe you enable the deprecated TLS options in about:config in the latest Firefox.

[Mr Pointy]

mmm-five said:

I believe you enable the deprecated TLS options in about:config in the latest Firefox.

I've just had a look in about:config & there are a couple of switches to try:

security.tls.version.enable-deprecated (currently set to false)
security.tls.version.min (currently set to 1)

https://support.mozilla.org/en-US/questions/110189...

Might be worth playing with OP.

[WinstonWolf]

Thanks folks, FF v22 allowed me to press a "fk it, I know what I'm doing" button and proceed

[SBDJ]

IMHO it's a better solution than having a more modern browser and turning down the TLS/SSL settings, then forgetting you've done that...