As of Firefox 39, Mozilla has dropped support for SSL3 and RC4... and whitelisted 519 (!) non-compliant sites: (https://mxr.mozilla.org/mozilla-release/source/security/manager/ssl/src/IntolerantFallbackList.inc), including such juicy ones as:
login.chicagopolice.org
partnerweb.vmware.com
www2.bancobrasil.com.br
www.publicjobs.ie
www.londonstockexchange.com
www.americanairlines.com
starbucks.com
(and a bunch of others - financial institutions, media companies, whatever rocks the boat).
How should the users be made aware of the remaining security holes?
Bugzilla discussion for ref: https://bugzilla.mozilla.org/show_bug.cgi?id=1128227