Please update to the latest version of Firefox to take advantage of the latest SSL ciphers. Then make sure you have the latest version of the Calomel add on. We are only supporting the latest version of our add on on the latest version of Firefox.
UPDATE 3: Firefox 27 added two 128 bit Galois/Counter Mode (GCM) ciphers. Only GCM enabled sites are able to get a 100% score and the green icon. Please upgrade to FF27!
UPDATE 2: Firefox 25 now allows the add on to query the full cipher suite. We have added the ability to grade the connection on each part of the cipher including key exchange, signature, bulk cipher and message authentication code. We also check and grade the cipher if it supports Perfect Forward Secrecy (PFS). "Calomel SSL Validation" version 0.64 for Firefox 25 and above is now available.
UPDATE 1: With Perfect Forward Secrecy (PFS) in the news we have posted to the Mozilla developer lists asking for the ability to collect the full cipher name from Firefox. Until we can get more information from the browser we can not add additional functionality the the addon. https://forums.mozilla.org/addons/viewtopic.php?f=7&t=14680
The "Calomel SSL Validation" add-on grades the SSL cipher strength of the current connection. Access to a detailed summery of the SSL negotiation is supplied by a toolbar button you can now place on any toolbar. The button also will change color depending on the grade from red (low score), to orange, to yellow, to blue and finally to green (high score). Standard HTTP unencrypted connections will turn the URL bar icon gray.
This add-on was designed to more easily show the true security state of the connection so everyone can learn more about ciphers and encryption using SSL. Firefox currently shows a green URL tag for an extended validation (EV) or a blue URL tag for a domain validation (DV) certificate and a lock icon if the connection is SSL encrypted. We did not think this was enough information to decide if the connection to the site was truly secure. This is why the "Calomel SSL Validation" add-on was developed. We score the connection on the following items: if the certificate was valid, if the fully qualified host name is equal to the common name the certificate was registered for and the strength of the cipher and cipher key length.
In the "Preferences" section you can find many options we find extremely useful like:
::- Use of only the strongest 256 bit ciphers in high security mode in addition to disabling the Online Certificate Status Protocol (OCSP). There is also a toggle under the "Tools" menu to turn the FIPS-140 high strength ciphers on or off instantly.
::- The "optimization" tab to enable settings similar to those found in FasterFox, but unlike that add-on we only enable safe, Mozilla acceptable configurations. This tab provides speed optimizations we found to increase the "quickness" of the browser while using less CPU time and bandwidth.
::- In the Privacy tab you can choose to hide titles and icons in each of the tabs similar to the add on "Page Title Eraser". This option might be used to stop people looking over your shoulder to see what sites you have open.
::- Finally, there is a tab to disable annoyances like blinking text and gif animations commonly seen in ads.
All of these options are disabled by default when you install the add-on. We do not believe it is ethical to change a user's built-in settings automatically. Take a look at our help page and decide for yourself what you would like to use. The help page should be shown in an additional tab after the add-on is installed.
A detailed and comprehensive explanation of the options and scoring can be found on our help page at the "Website" link above.
Privacy and security are very important to us. This add-on does NOT contact any external sources about browsing habits or SSL statistics. All information is retrieved from Firefox itself and kept internal to only your user. The add on does NOT store any personal or metadata information other then your preferences (as about:config values) to protect your privacy.
Calomel @ https://calomel.org