5.1.2 Hardening the browser

OFSLL is certified for usage in different browsers. Please refer the respective release documents on the versions of browsers on which OFSLL has been certified. Each of these browsers provide recommendations from a security perspective and customers are encouraged to employ the recommendations provided by them.

Among the guidelines provided in these documents, Oracle Financial Services specifically recommends the following settings to all customers of OFSLL:
  • Certificate Security - Ensure the usage of SSL 3.0 and TLS 1.0. Disable SSL 2.0 as it is an insecure protocol.
  • Privacy Settings - Set Form autocomplete options to Disabled. This will prevent inadvertent caching of data keyed by users.

Customers are encouraged to employ the security recommendations provided by each browser vendor.