"Dee" wrote


| Thank you so much, Paul, for the clear explanation and steps. I
| remember reading about this years ago but did not explore it further
| at that time. I have saved your post for reference. I have Win XP SP3
| Home 32-bit, so I guess that's vanilla XP.
|

I had to figure this out for my own software because
I wanted to use Microsoft's winhttp library to download
maps. It's actually very simple:

1) put this in notepad and save it as a reg file, then
run it. (Watch for wordwrap.):

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\TLS
1.1\Client]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\TLS
1.1\Server]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\TLS
1.2\Client]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Contro l\SecurityProviders\SCHANNEL\Protocols\TLS
1.2\Server]
"DisabledByDefault"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]
"Installed"=dword:00000001


The last setting allows the patch to install. The others
are to configure TLS 1.2 to be recognized.

2) Download this and install it, straight from the horse's mouth:

http://download.windowsupdate.com/c/...5e1240ce3d.exe


No risks I'm aware of. It just enables TLS 1.2. However,
that's not your problem with XP. I'm still trying to figure
out what the problem is. WebGL? Something else? Some
pages just won't work. For me it's complicated because I
also use NoScript, an extensive HOSTS file, and Secret Agent
extension, in addition to it being XP. Oddly, the more recent
vintage New Moon seems worse than FF 52. Why? I don't
know.

Websites are such a mess these days, with many pages
completely broken unless script is allowed from a dozen
sources. Even then sometimes they're broken. I use a
CSS-toggle button to fix many of them.

On top of the other issues, many sites are deliberately
breaking unless you allow script and let them show ads.
The page will load broken, with links set to not function
in CSS, or an opaque DIV covering the whole page. Then
those problems are only fixed by script. It's a non-confrontational
way of giving you a choice between broken websites or
allowing the website to completely take over your browser
with moving, flashing, pop-upping, spying, and so on.

One thing that will definitely help in many cases is to
change your userAgent to Win7 with Firefox 84 or something
similar. Many sites now are rigged to just reject any browser
that isn't new. The web designers can't be bothered to
uderstand what they're doing. They load jquery and other
"libraries" from 3rd parties, copy snippets of script from online
to add pizzazz to their pages, and they simply don't have the
idea that their page should work for you. It's your job to
make the page work for them.