Security Measures against Vulnerability of SSL 3.0

November 17, 2014

Thank you very much for visiting Fujifilm website.

An external source recently reported that a vulnerability (POODLE) was found in “Secure Sockets Layer 3.0 (SSL 3.0),” a data encryption method commonly used for Internet communication, and such vulnerability may cause leakage of information from contents of communications.
In response to this, we will stop using “SSL 3.0” on our website from the date specified below. Thereafter, please use other encryption methods, e.g., “Transport Layer Security 1.0 (TLS 1.0),” to view our website.

“SSL 3.0” Cessation Date

December 1, 2014

Consequences of Cessation

For most of the browsers used nowadays, no inconvenience or adverse effect will occur because they are also supported by TLS, which is the next version of SSL.
However, browsers supported by SSL only, e.g., default setting of Internet Explorer 6, will be unable to display the “Inquiry Form” and other encrypted pages from the cessation date.

  • * Pages with addresses starting from “https://” are encrypted pages.
Workaround procedure if any page cannot be displayed after the cessation date

(if you use Internet Explorer)

Please change your browser’s setting to activate “TLS 1.0” as per the following procedure:

  1. 1. On the Internet Explorer menu bar, select [Tool] and then click on [Internet Options] from the menu.
  2. 2. In the [Internet Options] dialog box, click on the [Advanced] tab.
  3. 3. Uncheck the [Use SSL 2.0] and [Use SSL 3.0] checkboxes, check the [Use TLS 1.0] checkbox, and then click on the [Apply] button.
    • * If [Use TLS 1.1] and/or [Use TLS 1.2] are also displayed in the dialog box, it would be advisable to also check these checkboxes to make them available as alternative methods in case “TLS 1.0” becomes unusable in the future.
  4. 4. Reboot Internet Explorer.
[Image]

Please see the Microsoft Security Advisory for further details.

Topic:
Share