<html><head><style> body {height: 100%; color:#000000; font-size:12pt; font-family:arial,helvetica,sans-serif;}</style></head><body><div>Cool, I didn't know that Firefox was being so aggressive about that.</div><div><br></div><div>This is basic ssl server configuration, not a shib thing. See <a href="https://www.ssllabs.com/ssltest/analyze.html?d=fim.temple.edu">https://www.ssllabs.com/ssltest/analyze.html?d=fim.temple.edu</a> for some pointers. Unfortunately, if you inherited someone else's old tomcat install, it might not be so "basic." Your best short term fix is probably to put a modern version of Apache in front of it as a reverse proxy.</div></body></html>