TLS security settings aren’t set to the defaults

Anonymous
2017-10-30T20:54:47+00:00

Keep getting this error message when I go to sites that used to work to pay my bills.

Can’t connect securely to this page<br><br>This might be because the site uses outdated or unsafe TLS security settings. If this keeps happening, try contacting the website’s owner. <br><br> <br><br>Your TLS security settings aren’t set to the defaults, which could also be causing this error.<br><br><br>Try this:<br><br><ul><br><li><span style="color:#0066cc">Go back to the last page</span></li></ul>
Windows for home | Windows 10 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

73 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2018-07-09T00:31:05+00:00

    Thanks for the info.  My problems started because I had to reset my laptop.  It must have reset the security settings too.  You never know what you'll bump into when you have to start over on a 5 year old machine.

    Was this answer helpful?

    0 comments
  2. Anonymous
    2018-07-08T14:16:40+00:00

    The advice is correct: do not use SSL 3.0. If you are getting the "Can’t connect securely to this page " warning as shown above that usually means you are using a security (anti virus) program that intercepts *all* traffic from and to the browser. If that traffic is https it has to use one of the encrypted transport protocols SSL/TLS. The security program intercepting has to be able to "speak" that protocol. In case of that warning it cannot "speak" that protocol (either because of configuration or because it doesn't have support for a newer encryption protocol) and wants to downgrade the connection to a protocol it supports. But in your case the browser has SSL 3.0 unchecked (which it should be and which is the default since long!), so there is no automatic downgrade available. If you then set this checkmark by yourself it works. Of course. The correct solution is to get rid of this outdated security suite (and reset the internet options to default if they aren't).

    Was this answer helpful?

    0 comments
  3. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

    Comments have been turned off. Learn more

  4. Anonymous
    2018-07-06T20:27:56+00:00

    Sorry if the info wasn't all correct or up to date but it was all I could find and my problem did go away by doing it.  Since you're a moderator I'm sure you know a lot more than I do.  I'll change my settings to what you suggested.  Here is what I found:

    Was this answer helpful?

    0 comments
  5. Anonymous
    2018-07-06T11:51:31+00:00

    The TLS security settings was solved by going to the Start command line and putting in "internet options", going to the "advanced" tab, go down the dropdown list to "security" and make sure there are check marks in : Use SSL 3.0, Use TLS 1.0, Use TLS 1.1, Use TLS 1.2, click on "apply".  That took care of my problems.

    Please don't recommend using SSL 3.0. It's not been regarded as secure since 2014, and websites should no longer demand it. See here, for example: SSL 3.0 Protocol Vulnerability and POODLE Attack 

    There are also serious doubts about the advisability of using TLS 1.0; most users will be able to surf the web as usual with only TLS 1.1 and 1.2 enabled. Some important sites no longer allow it: TLS 1.0 is Being Turned Off for www.nist.gov 

    You can view a report about your browser's security arrangements by visiting this page: SSL/TLS Capabilities of Your Browser

    Was this answer helpful?

    0 comments