Error 128 (net__ERR_SSL_UNSAFE_NEGOTIATION)

Issue

Some home security and antivirus software doesn't interact well with Chrome. As a result, Gmail and other Google sites may show an "Error 128" message.

So far, we've confirmed that some configurations of NetNanny, Kaspersky and ESET Smart Security cause issues. Instructions for fixing these issues can be found below. If you're having issues with other programmes, please see the forum.

Solutions

Kaspersky

  1. Open Kaspersky Internet Security 2011.
  2. At the top right of the control window, click Settings.
  3. Go to the Advanced Settings tab.
  4. Select Threats and Exclusions.
  5. In the Exclusions section, click Settings.
  6. Click the Trusted applications tab.
  7. Click Add, then select Applications.
  8. From the list of applications, select Google Chrome.
  9. Select the “Do not scan network traffic” checkbox.
  10. You should see the message "Do not scan all network traffic". Click the "all" link and change it to encrypted.

NetNanny

  1. Right-click the NetNanny icon netnanny icon in your System Tray, which should be in the lower-right portion of your screen.
  2. Select Admin Tools in the menu.
  3. In the settings window that appears, click Web browsing in the "Filtering" section.
  4. In the "Additional Settings" tab, under the "Secure Internet Content (HTTPS)" section, select the "Allow secure content" option.

ESET Smart Security

  1. Open ESET Smart Security 4.
  2. On the left-hand side of the window, click Setup.
  3. Click Toggle Advanced mode.
  4. Once in advanced mode, click Enter entire advanced setup tree.
  5. Find the "Protocol filtering" section on the left, expand it and select SSL.
  6. On the right, select "Do not scan SSL protocol".