Logjam HTTPS exploit
Posted: Thu May 21, 2015 5:19 pm
jscher2000 suggested (in the mozillaZine thread) to disable the ciphers that are vulnerable to this attack as follows:
about:config > set security.ssl3.dhe_rsa_aes_128_sha and security.ssl3.dhe_rsa_aes_256_sha to false
EDIT Then restart the browser. /EDIT
I can confirm that this works against the above linked test in SeaMonkey '2.35pre' (Gecko 38.0.1) and SeaMonkey 2.26.1 (Gecko 29).