Windows 10 reached EOS (end of support) on October 14, 2025. For more information, see this article.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

personal certificate preferences set to “Ask me every time”, does it mean Ask me once per browser session or once per host I connect to

  • 3 replies
  • 1 has this problem
  • 80 views
  • Last reply by glyfada

glyfada
glyfada
more options

I am constantly allowing my personnel cert to be given to hosts via the UIR dalog box as of 24.3 i think. It definitely did not do this with 17. I know "select one automatically" fixes this but I need it turned on. I read the following http://blog.bimajority.org/2014/04/28/the-latest-way-in-which-firefox-is-broken/ which states "Ask me every time means" once per startup...not once per host. Is this right? Has a bug been introduced to make this box pop up constantly as I surf? or has the behavior changed on purpose...a bug was fixed and it was always suppose to ask every host?

I am constantly allowing my personnel cert to be given to hosts via the UIR dalog box as of 24.3 i think. It definitely did not do this with 17. I know "select one automatically" fixes this but I need it turned on. I read the following http://blog.bimajority.org/2014/04/28/the-latest-way-in-which-firefox-is-broken/ which states "Ask me every time means" once per startup...not once per host. Is this right? Has a bug been introduced to make this box pop up constantly as I surf? or has the behavior changed on purpose...a bug was fixed and it was always suppose to ask every host?

All Replies (3)

guigs
guigs
more options

Hi if you are asked every time this may be a setting in your certificate settings: Please see http://mzl.la/LRo0Rj

On each cert there is a Trust option:

  • This certificate can identify websites
  • This certificate can identify mail users
  • This certificate can identify software makers

Is the certificate you are using have the first Trust option checked? Is your cert8.db file not hidden in the user profile? Are other certs working?

cor-el
cor-el
  • Moderator
more options

This might be a consequence of enabling false start in Firefox 25 and later.

  • bug 658222 - (tls-false-start) Enable SSL False Start for HTTPS/WebSockets/SPDY connections

Note that you may be able to recover from a wrong choice by clearing the "Active Logins" via clear recent history. This will however log out out from all authenticated sessions

glyfada
glyfada Question owner
more options

THANKS!

I'll consume the info in bug 658222 - (tls-false-start) Enable SSL False Start for HTTPS/WebSockets/SPDY connections

Can you please confirm that the behavior I am seeing is not the intended behavior? and Firefox should not ask on every web site for my personnel cert as I browse? In fact sites that are using web services from different host request my personnel cert for each service/host

Given I have 2 personnel certs, should Firefox ask once per browser session which one I want to use?