Φόρουμ κοινότητας «Firefox»

Subject: OCSP Must-Staple Behavior Observations in Firefox (Including iOS Platform)

Dear Firefox Team,

We have been conducting tests involving certificates with the OCSP Must-Staple extension and would like to share several observations regarding Firefox’s behavior across different platforms:

General Compliance with Must-Staple: On most platforms, Firefox correctly enforces the Must-Staple extension. That is, if a certificate includes the Must-Staple flag and the web server fails to provide a stapled OCSP response, the connection is appropriately terminated.

Unexpected Behavior on iOS: However, we have observed that Firefox on iOS does not appear to enforce this requirement consistently. Even when the server does not provide a stapled OCSP response, the browser still establishes the TLS connection. We are unsure whether this is due to platform limitations or an implementation inconsistency.

Redundant OCSP Requests Despite Stapling: Additionally, we found that Firefox still initiates an OCSP request even when a valid stapled response has already been provided by the server. This behavior not only degrades performance but may also introduce privacy concerns, it contrary to the original privacy and efficiency goals of OCSP Stapling.

At home we have a shared computer with Ubuntu and Firefox as main browser. Each family member has its own Linux user.

We use the functionality of Firefox saving passwords, however we've noticed that these passwords are visible between the Linux users. So, for instance if two of us use the same website, somehow our user/pass get are visible to each other. Is this behavior expected? How can we set FF to make the user/pass visible only to the Linux user who is using it?

Cheers

For first time received email from breach-alerts@mozilla.com. Title is: Your monthly Mozilla Monitor report. Is this a scam? Other people have asked this question and Mozilla Firefox company has not made any attempt to answer these serious questions. If I do not hear back from Mozilla Firefox within a week I might remove Mozilla Firefox and use another company.

I WAS ON A SITE AND IT BROUGHT UP THE COOKIE PAGE FOR FIREFOX TO PROTECT ME FROM PEOPLE OR COMPANIES FROM TRACKING MY BROWSING AND I COULD NOT GET BACK TO MY PURCHASE PAGE APP ACOOUNT I WAS ON. SO WHAT HAPPEN & WHY DID THIS COME UP?

Free youtube downloader wants my age from Firefox to download popular music videos. I am logged in to FireFox and Free YouTube downloader identifies FireFox as my default browser.

This is really an error for Free YouTube Downloader to correct, but many FireFox users must have solved this already. Any advice?

Thank you!

Hello, When I try to use Mozilla firefox, using this rather than Google chrome I get the following warning from Malwarebyte: Exploit.PayloadProcess.Block, making me feel uneasy. Best wishes, Torbjørn Borgen Lindhardt, Denmark

Kaiser has installed a 3rd Party cookie. "We may also place a persistent third-party cookie (provided by Google) on your hard drive if you sign on to kp.org."

The way to opt out is to go on the following website and opt out. However, only 3 out of the 51 companies could opt out on Firefox. It claims that the browser setting is prevent it from opting out. https://optout.networkadvertising.org/?c=1

I would be grateful for some information on container behavior, i.e. I created "permanent" (as opposed to temporary) containers for sites where I want that site's cookies & site data preserved in a container, so I can click "Clear Cookies/History" (or "Clear... when Firefox closes) and the items stored in PERMANENT containers are left alone, while all else is deleted. "Clear ...." doesn't appear to be respecting the permanent containers I have set up precisely to preserve these sites' cookies & data.

I'm not sure what the point of Permanent Containers is, if not to preserve those sites' data, for the sites' later use when you set Firefox to Clear Cookies and Site Data whenever Firefox Closes (or Clear Cookies & Site Data with one click). I expected it to respect data in Permanent containers, as exceptions. Else why not just use separate Temporary Containers for everything? Why bother with Permanent Containers if everything is going to be deleted when Firefox closes, whether it's marked "Permanent" or not? Is there a solution for this? Thanks, -AnneF

I have been watching YouTube for years, issue free. This week I was blocked, as my computer may be blocking ads and thus violating You Tubes policy. How can I find and disable ad block programs/ extensions, thus allowing me to get back on You tube. I can recognize an outright program, but do not knew if extensions are in play that are not obvious to me. THANKS

Why in the world am I seeing these tab Groups and Studies

After reading some posts on here I went to about:config and browser.tabs.groups.enabled was set to True. I changed it to false. I never set it to True and haven’t a clue to what Tab Groups are and don’t see any reason for me to have them. I only use about 4 tabs and have no use for any more. But I was noticing a Blue square box next to a tab and clicked on it and it said I had a Tab group which I deleted. Don’t know how a tab group was built, I sure didn’t ask for one and haven’t a clue what they are???

While researching this I seen something that about:studies could be the problem. I looked at it and it showed I was or had been in 4 studies!! All of the studies showed completed. I did not join or ask to be in any studies, what is Firefox doing signing me up for studies? I went to Privacy and Security and nothing under Firefox Data Collection and Use is checked including install and run studies. I have people’s secured data on here and if it gets out I could be sued!

I have run 3 full scans of different virus and all is clear. This must be something Firefox is doing without asking me for permission. I did find that browser.tab.groups.enabled was true, so I know FF must have done that during an update and I set it to False. Some post say FF will change it back to True?

What is really strange is the studies, it says they did 4 that are completed, yet it was not checked in the Privacy and Security section. Can't tell when as there is not a date.

These were the studies:

prefflip-push-performance-1491171•Complete hotfix-reset-xpi-verification-timestamp-1548973•Complete hotfix-reset-xpi-verification-timestamp-1548973•Complete pref-flip-screenshots-release-1369150•Complete