Support Forum

Is the latest Java 7 update 17 safe to enable now? I noticed after updating, it was still disabled, but no longer blocked in red by Firefox. My assumption is that it's safe, since not "in the red" currently. However, I'd like to be sure before I re-enable it. Thanks!

Currently loving Firefox 19.0 on WinXP SP3

I turned on my notebook this morning to find Private Browsing on and Firefox reset to the default appearance. I can't find out how to turn this browsing feature off! Read the articles, looked at Community forum ... nada. Please help! I want my own Firefox back!

hello

i would like to disable download history only, i tried the "clear history when firefox exits" option checking the download history only, but it didn't work. the download window is clear, but everything is there in the download history. is there a way to disable download history only, leaving the others intact?

thanks rgds jp

I am using Firefox (20) in an environment where I am required to use a proxy to access any external websites, and the proxy has recently been changed in such a manner that it now intercepts HTTPS requests and seems to reissue the certificates from a new identity.

This means that every page I visit that uses HTTPS shows the 'untrusted connection' warning page. I can, of course, add exceptions - but I don't want to have to do this for every secure page (and every subdomain, including those only used for serving up images or stylesheets, etc).

Is there any way to.. disable the warning page? Add an exception for "*"? Add the identity that the certificates are being reissued under to my trusted list (I don't have access to the certificate file)?

Neither Chrome or IE exhibit this behaviour under the same conditions.

NB: Troubleshooting info attached is from a different computer.

Hi,

I'm securely connected to my (self-hosted) webmail. https://webmail.whatever.com I've tried to access the SpamAssassin Configuration option within it but I get the following.

You have asked Firefox to connect securely to mailboxes.whatever.com, but we can't confirm that your connection is secure. mailboxes.whatever.com uses an invalid security certificate. The certificate is only valid for the following names:

 *.dreamhost.com , dreamhost.com  

(Error code: ssl_error_bad_cert_domain)

I understand why I'm getting the message, but how do I add an exception when the option to do so is not showing as it usually does? I can try and use the non-secure URL for my webmail, but I'd rather not and I might get the same results anyway.

The following does a (very) good job of explaining things, but solutions are not provided for all of the issues/messages. Perhaps that can be changed when we figure this out. http://support.mozilla.org/en-US/kb/secure-connection-failed-error-message

Best practice currently recommends prioritizing RC4 on the server for SSL3/TLS1.0. E.g. see: https://www.ssllabs.com/downloads/SSL_TLS_Deployment_Best_Practices_1.0.pdf

The reason is because of the well known BEAST attack, block ciphers are no longer considered secure for SSL3/TLS1.0.

However, the latest research is indicating that RC4 is now also broken, with practical attacks probably not too far off. E.g. see: http://blog.cryptographyengineering.com/2013/03/attack-of-week-rc4-is-kind-of-broken-in.html

This is not at issue in TLS1.1 and above. Unfortunately Firefox does not support anything above TLS1.0. This leaves users in a potentially very dangerous position.

I know this has been asked before, but I haven't actually seen an answer: When will firefox support TLS1.1 and/or TLS1.2?

Many thanks

I was on a news website & while opening an link in a new window, i clicked on block this website by mistake and now the website isn't opening anymore ! kindly help on how do i unblock the website now !

I have a large number of saved passwords that i would like to sort into alphabetical order. At the moment, for example, at the top of the list are yourhealthportal.com.au b2c.csair.com and singpet.com. n the Bookmarks menu it is possible to drag and drop items to a different position in the list. Can something like this be done with passwords?

This refers to the Plugins section and the updating option. In two previous versions of Firefox the plugins check tells me I need to update to a specific version of Adobe Reader, despite the fact I have laready done so. Does this mean Firefox is vulnerable, or Reader? Is it a problem or just a software glitch. Bearing in mind the complexity of Reader (which I need for work related reasons) I hope this doesn't indicate a serious issue rather than a transient one.

I'm looking for non-social Firefox edition or version. I want to follow the latest FF updates, but without any integrated services like social spyware and any other kind of malware. Options disable / enable are not sufficient to be safe and security in Firefox is corrupted by social API.

Social services and features must be implemented only as a simple optional extensions and nothing more.

I am prompted every time i visit a site that i enter a password on to save it in firefox 18, it's now getting annoying. I have tried to turn it off, but the box in firefox settings is shaded and won't allow me to turn password manager off, i know i can choose "never for this site" in the settings but with just about every site you go to now requires you to sign in it is really getting on my nerves. if this can't be resolved i may reluctantly have to change browser.

I want successful downloads to be automatically removed from the download history.

Or at least removed when the window closes (it already closes automatically at end of download).

I can't do that from the Options menu, is there a way using the about:config ?

This new update really turned private browsing upside down (not in a good way in my eyes). The other features all seem great, just not this one.

My first question is how can I use my shortcut desktop url's and have them open in the private window. They all default to the regular window (I'm assuming it takes priority over the private window so that is why they go directly there). Any idea's how I can use the links without having to go into the links properties and copy/paste into the browser? (Open file doesn't work either in-case anyone wanted to suggest it)

My second question is how do downloads work with the two browser windows? If I download something in private browsing is it shared with the normal window's downloads and vice-versa? (I can probably find this one out on my own but I'm here anyways, might as well ask)

My last question is when you open the private browsing window, and then when I close the regular window (leaving only the private window open), it doesn't save your tabs like normal is this supposed to happen or is that just a problem with mine?

Also, I'm not interested in the permanent private browsing that has been suggested in some other topics.

I love firefox, but this update has made private browsing awkward and tedious. I really hope they give the option to return the private browsing sessions.

Thanks, and sorry for ranting a little bit (and for the likely large amounts of poor grammar and badly formed sentences)

HSTS is problematic in that it incorrectly assumes that all users trust the default list of CAs and makes the adding of exceptions impossible even by advanced users.

For example, torproject.org is inaccessible on Firefox unless I am willing to trust DigiCert to never sign a fake certificate either by negligence or by court order of any country in witch they operate, thereby making every https: site ( not just torproject.org ) vulnerable to a MITM attack.

A user disabling CAs in the browser is not unreasonable given the ever growing list of CAs built into Firefox ( each one a potential point of failure ), the number of CAs that have been recently compromised and the very low standards required to obtain a certificate.

While I understand the desire to protect the average user who doesn't understand how certificates work and will click past warnings without reading them, this protection should not come at the expense of more security conscious users.

I would recommend an about:config setting that would allow the creation of exceptions by users who explicitly choose to do so.

So far the only kludge I have been able to come up with is to modify c:\program files\mozilla firefox\xul.dll with a hex editor and replace the sites on the list ( this is far from an ideal solution ).

Earlier versions of Firefox would let us specify how long to keep browsing history, and would then automatically clear out anything older than that. I can't find this option in Firefox 17. I've been having serious problems with FF, with frequent and lengthy pauses, which I finally traced to there being far too much browsing history being held. When I cleared out all browsing history, it seems to have resolved itself (crossing fingers). For the record: I had also tried starting in Safe Mode (w addons disabled), defragging my hard drive, radically reducing the number of open tabs, etc. Clearing browsing history was the only thing that made a difference.

Can we setup FF so that it will automatically clear out old browsing history? It seems to be all-or-nothing in Tools > Options > Privacy. I have FF clear out the cache every time I close it, but I don't want to clear out all history; just past a certain time (e.g. 90 days). I'm aware that I can manage this manually through History on the main menu, but I would rather this happen automatically.

Thanks in advance for the help with this.

S it necessary to disable Java (and Javascript) on Firefox for Android or are the issues only related to PCs and MACs? If I need to disable it on my mobile device, I can't figure out how to do it. I appreciate your help.

Good Morning I cannot use Private Browsing since downloading FF 20. I have Win7/64 bit Home Premium. I checked the Help articles, but this directs me to the "Firefox Button" at the top of the window. I do not have this button. I would be grateful for advice, as I find private Browsing very useful. Thanks for a brilliant, ever-improving Browser.

I can remember a check off box to delete all cookies and temp files on termination of each session. I can't find it any longer - where did it go? I can't believe you have to manually delete files to keep the crap off the computer now. Running 17.0.1. for windows xp home.