We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

certificate exception list in version 61.0.1?

  • 4 replies
  • 1 has this problem
  • 13 views
  • Last reply by rhp52

rhp52
rhp52
more options

Is there any way, without compromising my security, to add a known website whose hsts cert. has expired to an exception list? I have been in contact with the website owner and the problem is as follows:

He has changed servers since he originally set up the cert. and now he says he can't find anyone who can make it work on the new servers.

This is a well known website and the owner is beyond frustrated that this has occurred. So, I'm not concerned about the site so much as i'm wary of what else i may be exposing myself to if there was a workaround.

Is there any way, without compromising my security, to add a known website whose hsts cert. has expired to an exception list? I have been in contact with the website owner and the problem is as follows: He has changed servers since he originally set up the cert. and now he says he can't find anyone who can make it work on the new servers. This is a well known website and the owner is beyond frustrated that this has occurred. So, I'm not concerned about the site so much as i'm wary of what else i may be exposing myself to if there was a workaround.

All Replies (4)

Wesley Branton
Wesley Branton
more options

Obviously, you should always be cautious when using websites without a valid certificate.

You can add a certificate exception from the "Your connection is not secure" warning screen. When you add a certificate exception, you will have the option to make it permanent or just temporary. For maximum security, I'd recommend not making it permanently.

If you bypass the warning, the main concern is that your encryption isn't working properly. Encryption is the method used to convert your data from plain text to text that no one can read. This helps prevent people from eavesdropping or tampering with your data. This is incredibly important for websites that have you login to an account.

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

You can try to edit the SiteSecurityServiceState.txt file and remove the line(s) that refer to this domain (website).

You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.

rhp52
rhp52 Question owner
more options

Wesley Branton said

Obviously, you should always be cautious when using websites without a valid certificate. You can add a certificate exception from the "Your connection is not secure" warning screen. When you add a certificate exception, you will have the option to make it permanent or just temporary. For maximum security, I'd recommend not making it permanently. If you bypass the warning, the main concern is that your encryption isn't working properly. Encryption is the method used to convert your data from plain text to text that no one can read. This helps prevent people from eavesdropping or tampering with your data. This is incredibly important for websites that have you login to an account.

thx for the reply, but thisoption is not given in FF61.0.1

rhp52
rhp52 Question owner
more options

cor-el said

You can try to edit the SiteSecurityServiceState.txt file and remove the line(s) that refer to this domain (website). You can use the button on the "Help -> Troubleshooting Information" (about:support) page to go to the current Firefox profile folder or use the about:profiles page.

thx for the reply I'll try that