If you’re a Google Chrome user, you might have come across the Google Chrome Error SSL Server Probably Obsolete ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION while trying to browse to a HTTPS website. Unfortunately, as a user, there’s not much you can do to get around this error message except to try a different browser like Internet Explorer. About a year ago, Google announced plans to disable fallback to version 3 of the SSL protocol in Chrome 39, and remove SSL 3.0 completely in Chrome 40. The decision follows the company’s disclosure of a serious security vulnerability in SSL 3.0 on October 14, the attack it dubbed Padding Oracle On Downgraded Legacy Encryption (POODLE).
If you come across this error message as a user, you should try to find a Contact Us link on the website you’re trying to access. You could link back to this article for information, but the server administrator needs to update their site to support the newer SSL protocols. Until they do, they’re putting their server and their users at risk.
You can read more in this VentureBeat article.
One of the servers which Chrome now fails to allow us to use is: Time Warner Cable Business Class webmail. I’m guessing there must be thousands, if not millions, of TWC business class subscribers, who like me, must be getting pretty frustrated by now. And to hear Chrome say the (TWC) server has dangerous security issues is hard to believe. But it worried me enough to talk with the TWC techs who assured me their server is safe. So the question is: When can we all expect to see Chrome and TWC work this all out? Jim Seay, Wilmington, NC
Unfortunately it will come down to TWC updating the SSL software on their server. It’s not that it’s unsafe, it’s just an older and outdated protocol. Even Microsoft has said they will be diminishing support for it. My issue was with my city and paying my water bill online. I emailed the Chief Technology Officer and they said they’re working on upgrading.
Did you really make a blog entry to state: “If you come across this error message as a user, you should try to find a Contact Us link on the website.”
A non-technical person isn’t searching “ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION”. And technical people are searching for a workaround, not some fools errand directing them to contact the webmaster who already knows about SSL deprecation, and obviously has no intention of fixing it.
#FAIL
I understand that, but as a technical person, the only solution is to either use a browser that hasn’t blocked SSL 3.0 (such as older Internet Explorer), or to contact the webmaster to get them to update their server software. As an end user, there’s not anything else you can do besides try other browsers. If you find any other solutions, feel free to share them and I’ll update the article.
Haha…. I am a fairly technical person searching and was struggling between Firefox and Chrome. As stupid as it sounds, I never use IE and figured I’d give it a try. Thanks for pointing out the obvious. Ashamed I missed it, but happy I found this. I am trying to access a switch, and can now update it to use all browsers.
I absolutely was searching that as a non tech person, as that is the error message I received.
#DOUBLEFAIL
I got this error whilst trying to search Google!
That’s probably because your system is compromised and not really going to Google.
I don’t think it is, it’s Bitdefenders certificate.
Dear Google,
There are devices in the world that are not going to be updated because they are inaccessible or just not practical for update. What are we supposed to do about that.
You talk as if the item to which you wish to connect is in a server room in you office. That is often not the case.
There should be some way to allow a certificate and old SSL version to be allowed if needed. Just because Google doesn’t think it’s relevant doesn’t make it irrelevant.
SSL connection error
ERR_SSL_PROTOCOL_ERROR
SSL connection error
ERR_SSL_PROTOCOL_ERROR
SSL connection error
ERR_SSL_PROTOCOL_ERROR!!! SICK & TIRED with this crap!!! I can´t do NOTHING in my computer.
You need a new browser…try Internet exployer.
Perfect. So by not allowing me to disable this security feature I will soon be locked out of Remote Managing my server, which uses a hard coded firmware.
– Thanks for the free internet CHOICE Google!
whenever I try to access http://www.onlinesbi.com the massage appears ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION please solve it …
Thanks
Chinmoy Basu
whenever I try to access http://www.onlinesbi.com the massage appears ERR_SSL_FALLBACK_BEYOND_MINIMUM_VERSION please solve it …
Thanks
Chinmoy Basu