Φόρουμ κοινότητας «Firefox»

Hello everyone,

I am using Firefox latest release (eg 145.0.1).

At https://developers.cloudflare.com/ssl/post-quantum-cryptography/pqc-support/ , it seems that X25519MLKEM768 is supported since Firefox 132. Do you confirm ?

I ask this question because when I am connecting to https://pq.cloudflareresearch.com/ and activate the network tab before reaching this URL, and looked at the security tab on the right bottom panel, as you can see in the screenshot attached, in the Exchange group keys, I see x25519 and not x25519mlkem768 meaning that Firefox is not PQC ready for key establishment :-(

Best Regards.

1. 1. Резюме выделенного

1. 1. 1. Общее

Выделенный фрагмент содержит **цепочку из трёх X.509 TLS-сертификатов** (формат PEM), а также временну́ю метку **«5–7 минут»** (вероятно, срок действия или контекст страницы).

---

1. 1. 1. Сертификат 1 — Конечный (End-Entity)

- **Субъект:** `accounts.firefox.com` - **Выдан:** Let's Encrypt (R13) - **Действителен:** 15.02.2026 — 16.05.2026 - **Тип:** TLS-сертификат сервера (Domain Validated) - **Алгоритм:** RSA 2048 / SHA-256

---

1. 1. 1. Сертификат 2 — Промежуточный (Intermediate CA)

- **Субъект:** `R13` (Let's Encrypt) - **Выдан:** ISRG Root X1 - **Действителен:** 13.03.2024 — 12.03.2027 - **Назначение:** Подпись конечных сертификатов Let's Encrypt

---

1. 1. 1. Сертификат 3 — Корневой (Root CA)

- **Субъект:** `ISRG Root X1` (Internet Security Research Group) - **Действителен:** 04.06.2015 — 04.06.2035 - **Назначение:** Доверенный корневой центр сертификации; самоподписанный

---

1. 1. 1. Итог

Полная цепочка доверия: `accounts.firefox.com` → `Let's Encrypt R13` → `ISRG Root X1`

I recently encountered an issue when attempting to login to The Coventry Building Society website using Firefox (desktop PC & Windows 10):- https://www.coventrybuildingsociety.co.uk/ It failed to display the page used to enter the one time passcode used for two factor authentication.

After looking on some forums I discovered this is because 'Strict' tracking protection was enabled. If I change to 'Custom' and uncheck 'Tracking Content' then things work as expected.

I also read on a forum that you can leave tracking protection set to 'Strict' but enter the URL for the problem website under 'Enhanced Tracking Protection -> Manage Exceptions'. I tried entering 'https://www.coventrybuildingsociety.co.uk/' Initially this appeared to work. However, when I tried it again the following day, the page failed to load as before. I had to change back from 'Strict' to 'Custom' and uncheck 'Tracking Content' once again. It's as if the exception URL is ignored in 'Strict' mode.

Am I doing something wrong or is this how it is supposed to work? Do I need to click on the shield icon (to the left of the padlock icon) and turn off 'Enhanced Tracking Protection' every time I visit the website?

I've disabled HTTPS only mode. When i enter a local http://server.localdomain server Firefox upgrades that to https://server.localdomain. How do I disable that?

Hi, I'm using a policie file to force a family-dns. Ive written the current code down below. Unfortunately this leaves the "manage exeption"-button open, where its possible to simply bypass the block for a specific site. Is there a way to lock this button in the policie file? Thank you very much. {

 "policies": {
   "DNSOverHTTPS": {
     "Enabled": true,
     "Locked": true,
     "ProviderURL": "https://doh16.jusprogdns.com/dns-query"
   },
   "Preferences": {
     "network.trr.mode": {
       "Value": 3,
       "Status": "locked"
     }
   }
 }

}

passport.moi.gov.af has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

Hello Folks, I just importeda a new certificate. Then I wanted to save all my certificates for backup. Selecting "Backup all...", I neter a secure password and click ok just to get the following error message: Failed to create the PKCS #12 backup file for unknown reasons the only button is "OK"

How can I start finding out what is going on and is there any means to save my certificates?

I was reading about CSS custom variables at https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_cascading_variables/Using_CSS_custom_properties, and noticed that the example at "Using @property to control inheritance" does not work as described in the latest Firefox (115.21.0esr, 64-bit. on Windows laptop).

More specifically, both the parent and child divs come our in green, but the child div is supposed to come out in cornflowerblue.

Although it is not affecting me yet (I haven't decided whether to use this particular CSS feature), I was wondering if the issue was known.

Hi, I used to see the HTTPS designation in the Firefox address bar, but no longer see it lately. It does appear in the Edge address bar.

I do appreciate your help.

Trying to enable NextDNS for DNS over HTTP but it shows as not active (TRR_PARENTAL_CONTROL). I do not have any parental controls enabled on this device so im not sure whats causing this isssue.

Open my desktop and NordVPN starts up. The Firefox extension frequently shows I an not connected via the VPN whilst Nord says I am. I have in the past clicked on the extension to connect the VPN and this has worked but recently I just get an error. Same thing occurs with NordPass.

Dear Mozilla Team,

I kindly ask you to add support for the X25519MLKEM768 hybrid post-quantum key exchange to the domain detectportal.firefox.com (the URL used by Firefox connection testing). This small change would significantly strengthen privacy protection for millions of users who rely on Firefox's connection test URL. As you know, this mechanism has already been successfully implemented on almost all of your other domains. Extending the same protection to detectportal.firefox.com would ensure consistency and close the remaining gap. Thank you very much for your ongoing work on privacy and post-quantum cryptography. I would greatly appreciate your attention to this request. Best regards, Anonymous

Around 12/28/2024 my LastPass Password Manager extension dropped off my Firefox. When I tried to reinstall nothing happens except the flashing dots, which just go on. The LassPass extension does work on my Chrome browser (only used as a backup, Firefox using Duckduckgo rules)

Steps I have taken. Relaunched firefox. Rebooted laptop Deleted all Lastpass cookies. Did a firefox refresh. Tried to install older version of lastpass, they download but won't let me add.

Please Help? Thanks

My mobile package site shows mixed-content warnings on Firefox — how can I fix this? Hello everyone, I run a website, which provides information about mobile phone prices and SIM packages in Bangladesh. Recently, I noticed that when users visit some pages in Firefox, the browser shows a “mixed-content” warning or blocks certain scripts. The same pages load fine in Chrome. All my URLs use HTTPS, and I’m using a LiteSpeed server with Cloudflare CDN. Could this issue be related to how Firefox handles external resources (like embedded operator banners or analytics scripts)? What’s the best way to debug and fix mixed-content problems in Firefox Developer Tools? Any detailed guidance or best practices would be greatly appreciated. Thanks in advance!

I would like to understand how DNS over HTTPS impacts browsing speed and privacy in Firefox.

Details: Hello everyone,

I am currently exploring Firefox privacy and network settings, especially DNS over HTTPS (DoH). I noticed that enabling this feature slightly changes website loading behavior on some networks.

I would like to ask:

Does DNS over HTTPS introduce additional latency? Are there performance differences between providers? Can corporate or public Wi-Fi networks interfere with DoH requests? Is there a recommended configuration for balancing privacy and performance?

I’m interested in both technical explanations and real-world experiences from Firefox users.

Thank you.

I used Chrome until two days ago. I just got tired with how shitty the browser was, how bloated it made my computer, and how much Google treats everyone like a data product. However, I use hella google systems from Voice to Chrome to Drive to more and it all worked great together. Choosing to change to Firefox wasn't an easy decision but I knew it was a good one

Which makes it super irritating that some of the functionality is already facing problems. I have shortcuts I built to make it easier to study or do random things so I don't get distracted or tired. One shortcut is clicking a key that should launch UWorld in my default browser & use Lastpass to autologin (I couldn't get it to launch the service but that was a separate issue).

I check if autologin was on for the password on LastPass I've allowed all permissions to the LastPass extension I clear my cookies on UWorld & turned off enhanced tracking protection for the UWorld login portal site

What should I do to fix my one button shortcut again?

I really don't want to go randomly turning off every protection that Firefox gives me to figure it out so I'd appreciate someone who understands the browser better helping me out. Also, bonus points if you can help me build a single shortcut button on my Mac that can launch UWorld & navigate me straight to the question bank. (I do think the issue with autologin on LastPass is going to become more of an issue as I start opening up more websites I used to use on Chrome so I'd rather nip it in the bud before I see the problem occur more often)