SSL/TLS on Comcast support web forums

There are issues with comcast support forum sites authentication through servers that are supporting very old and very insecure SSL.TLS versions.  This seems to be just an oversight in not upgrading software on those web servers.

Just a reminder- Fairly early in the web's widespread adoption, February 1995, Secure Socket Layer (SSL) version 2 (SSLv2) was defined. Version 1 was never published due to serious security flaws. In 1996 SSL version 3 (SSLv3) was defined to address flaws discovered in SSLv2. SSL was replaced by Transport Layer Security (TLS). TLS 1.0 was published in 1999, TLS 1.1 in 2006, and TLS 1.2 in 2008. TLS 1.3 is expected to be published in 2017

Please take a look at:

https://www.ssllabs.com/ssltest/analyze.html?d=login.comcast.net&latest

https://www.ssllabs.com/ssltest/analyze.html?d=pingsso.lithium.com&latest

These rate two web servers referenced when posting to these forum.  The first is comcast run and has poor security.  It does use TLS 1.2 but with limited FS ciphers.  The second is referenced for some reason and supports only TLS 1.0 and SSLv3 (SSLv3 should be completely depricated by now) and supports only one known vulnerable cipher.

The latter is the more sever problem and would be fixed more quickly (by lithium) is comcast support as a lithim paying customer put in a ticket with lithium.  Right now only TLS 1.0 TLS_RSA_WITH_AES_128_CBC_SHA (No FS) is supported which is vulnerable to the POODLE attack (google it or use wikipedia).

The bottom line is that with a newer browser set to disable known insecure protocol versions and ciphers, it is not possible to post to the forums.  These settings will become more common.  I'm using a laptop with an older browser to post here.

Curtis