Each time an API request is made over HTTPS, Firefox generates the following message in the error console:
Curious, I looked up RFC 5746 and the document covers the following:
Transport Layer Security (TLS) Renegotiation Indication Extension
Secure Socket Layer (SSL) and Transport Layer Security (TLS) renegotiation are vulnerable to an attack in which the attacker forms a TLS connection with the target server, injects content of his choice, and then splices in a new TLS connection from a client. The server treats the client's initial TLS handshake as a renegotiation and thus believes that the initial data transmitted by the attacker is from the same entity as the subsequent client data. This specification defines a TLS extension to cryptographically tie renegotiations to the TLS connections they are being performed over, thus preventing this attack.
I realize that this probably isn't a terribly serious problem, but it does appear to be a bit of a security concern. Is there any chance this could be fixed?
Edit: not sure if it's related, but it gets worse:
I get this dialog box in Firefox 9.1 if I attempt to authenticate an app using the implicit flow.