Hello, We performed a pentest for a web app who is hosted by FF. 2 major vulnerabilities have been detected : BREACHLUCKY13TLS_FALLBACK_SCSV
We tried to add headers in custom headers in App Settings > Web Publishing but this should be fixed server wide.