Something us messed up at the Citicards website, Firefox is capable of far greater than 128bit encryption.

In Firefox 4 (released 5 months ago), the U in the UserAgent string was removed, and that might be why that website is throwing that message - ??

That U hasn't meant much of anything in 15 years, since the US government lifted restrictions on the export of browsers with that level of encryption in 1996. So any web site which is "sniffing" for that character is a couple of decades behind the times.

Firefox ever since it was known as Phoenix 0.1 supported 256-bit encryption if the website provided such support. There is nothing to add to Firefox.

I agree that it likely to be the website is sniffing for the U in browser UA as that is not really the best way now days. They should still provide a button or link to continue on.

Thanks to both. I actually pushed ahead and went through with my payment with no worries after all that. I read that firefox was capable of 256 and it worked no problem.

Appreciate your responses, have a great weekend