Firefox Community Forum

i have a big problem with settings of privacy and security. the problem is i cant edit this option ( Allow Firefox to automatically trust third-party root certificates you install ) and its greyed out . i made everything ( refresh - troubleshoot - uninstall ) and with the first click on singing my account on Firefox and add my restore my add-ons after setting up windows this option become unavailable (greyed out) and cant edit it. i need a solution without going to set up a new windows because its so tiring to set up a new windows to edit this option. please give me a solution its emergency. thanks a lot.

In the Settings, the "HTTPS-Only" feature seems broken. There is an option to 'Don't enable" this feature, but that doesn't make any difference. I can get to an "http:" site using any other browser, but not with the latest Firefox.

I recently opened Firefox to see a new flagged warning under my toolbar that says "The security sandbox is disabled. Your configuration is unsupported and less secure."

I have gone into about:config and adjusted every security.sandbox element to see if that would change anything; it did not.

I am running on Windows 11 Home so I cannot install or properly run Windows Sandbox.

I would either like a solution to enable the sandbox once again, or just remove the notification from the toolbar.

I'm blaming the latest Firefox update from a couple of days ago, since this problem only arose yesterday. Now cut off from reading and following news that I really want to receive.

This is what I get when trying to access links within a few of the websites that I regularly access for links to articles it posts:

The site ahead may contain harmful programs

Firefox blocked this page because it might try to trick you into installing programs that harm your browsing experience (for example, by changing your homepage or showing extra ads on sites you visit).

Advisory provided by Google Safe Browsing.

I've noticed that Mozilla products (firefox, thunderbird etc) all phone home all the time, which is a violation of both my security as well as privacy policy. In the firewall one can observe persistent, periodic, repeated connections to various non-sanctioned sites and services, apparently run by Mozilla. These include, but are not limited to:

• .mozgcp.net
• .services.mozilla.net

firefox-portal-detection.com etc.

Specifically, there are persistent, periodic and repeated connection attempts to (just copy/pasting from the first page of firewall report; there are many more as well as similar connection attempts from thunderbird as well): firefox-settings-attachments.cdn.mozilla.net:443 assets-prod.sumo.prod.webservices.mozgcp.net:443 content-signature-2.cdn.mozilla.net:443 push.services.mozilla.com:443 etc

These begin at the startup of the browser/mua and continue throughout the session. Given that none of the sites actually browsed have anything to do with mozilla per se, and given that various privacy-violating features such as DNS-over-HTTPS (yes, that's a not a privacy-enhancing feature but the opposite - it just shifts the surveillance point from the ISP to the DoH provider) and other similar "features" are disabled in-browser, there should be no user/browser connections attempted to mozilla servers.

Also, by setting up a local security MITM proxy in order to observe and analyze the content sent to and received from these services and configuring the browser to connect via the proxy, the browser seems to *stop* trying to connect to these services, which indicates *active* measures by the browser/mua to avoid it's browser-fingerprinting and location-revealing content from being intercepted and analyzed.

This is especially concerning as Mozilla actively brands and markets it's products as privacy-respecting, as for-user-rights and as away-from-big-tech-dominated. Consequently I perceive this as complete breach of trust. Even by just *attempting* such phone-home connections a leak of metadata occurs, identifying the IP, the browser and consequently the user and user's location, sometimes actively (such as was the case with now apparently discontinued location.services.mozilla.net). Combined with whatever content these connections carry, this constitutes a serious breach. And there seems to be no way for the user to configure the browser to stop making these connections, other than by using an external application firewall.

And to top it off, with Firefox version 155.0.1, the browser now outright refuses to connect to *any* sites at all if firefox.settings.services.mozilla.com:443, firefox-settings-attachments.cdn.mozilla.net:443, firefox-portal-detection.com:80 and content-signature-2.cdn.mozilla.net:443 are *externally* blocked, at least on that profile (which worked just fine prior to upgrade to 155.0.1), showing a spinner and waiting indefinitely (not even timing out). These are the *only* connections it even attempts, completely ignoring the actual site that it was told to connect to. So that's at least 4 privacy-violating, security-policy-violating phoning-home connection attempts and a complete disregard for user's actual, sanctioned connection request.

I'm sending this from my phone. My desktop FF (Win 10) suddenly displayed a black wireless globe type icon called Prox-Media pinned to my taskbar. I can't find the app on my system, though, but the full path leads it to a firefox.exe file. Before my brain kicked in, I'd clicked on the icon right after noticing it, and Firefox came up with the attached error message displayed.

"Prox-Media" comes up nowhere in my searches - not as legit, not as a virus - just no results. Can you help?

I have a paid AVG account and I ran a deep scan but it found nothing.

Hi all the people,

I was just surprised to see this in an Apache HTTP log: "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Firefox/58.0.1"

This bugs me. My first guess would be that a Webkit based Firefox could not be qualified as really Firefox. Although that, I could imagine a Firefox for iOS or MacOS based on Webkit, may be, but it says it is on Windows, which makes less sense.

I suspect this is a user agent string spoofing, but I just need to be sure (I try to get ride of far too invasive bots, while I’m afraid to disrupt browsing from legitimate web users).

With thanks and my apologizes for such a question which may looks obvious or strange to people who know for sure.

I'm suddenly getting repeated/multiple Mozilla Firefox "Browser Alerts", "System Warnings," and "McAfee Critical Virus Alerts" that are wrong and dysfunctional. They pop up every few seconds. They contain "Remove virus now" and "quick scan" buttons, but these only take me to a bright red screen that says:

"Deceptive site ahead Firefox blocked this page because it may trick you into doing something dangerous like installing software or revealing personal information like passwords or credit cards."

These come even though I haven't tried to access any "deceptive sites." I have to x all of them out to clear my screen.

There's obviously a defect in your warning system. How do I stop this?

I have several websites in my own LAN. They run on HTTP. When I open one of these sites Firefox forces me to jump through hoops before I am allowed to open the intended webpage, because they are not running HTTPS, nor have a certificate. The security mechanism is valid for remote hosted websites, and I like the functionality.

But I own, operate and trust my LAN based websites, but I cannot prevent Firefox from complaining about them. I must do the song and dance to finally be able to open the webpage. All webbrowsers (Safari, Firefox, Chrome) do this, and it is very annoying

Solution: Allow the user to create a whitelist, either based on the website's ip adress, mDns name or blanket subnet. Come up with a solution that is easy for the user, and inspiring for your competition!

I clicked on a link in a forum site - pentaxforums.com - that should have pulled up image from a private web site but I think the url has been hijacked, the image didn't appear and instead the browser started pinging alerts. I have run avast anti virus and malwarebytes, these found suspicous malware (trojan, key clone) and rebooted, but these alerts still keep appearing, however I am wondering of the browser alert system itself has been compromised. See screenshots. if I click on one it seems to be trying to go to a suspicious url. any advice appreciated Marcus Brown

Tonight I was roaming around my Firefox settings looking at something else, when I noticed this AI piece pre-checked. Why is FIREFOX, who is supposed to be for privacy and security, authorizing an update that automatically choose AI? Not cool Mozilla. Not Cool. Anyone else have this? and yes, I've already fixed it ;-)

Hi,

I noticed that in the latest release (I tried both MacOS and Windows 11 ARM versions) that the "network.cookie.sameSite.laxByDefault" is no longer enabled, and cookies set by applications without specifying the flag, are not set with Lax and are sent in cross-origin requests. Could you clarify if this is intentional and why the change has been made?

Thanks

What happened to Firefox's permission's page? There's so few options now. I'm being harassed by websites to give them permission that should be blocked across the entire browser. I'm autistic and sensitive to popups/interruptions/distractions. So most permissions I simply had off for everything, because I don't want to be asked anything. I don't want to confirm anything. I don't want any popup of any type. So I turned everything off and it was good. (except blocking cookies of course)

But now sites are asking me again and there's no way to blanket turn off everything. I see I can press "Ctrl+i" to bring up specific permissions for that site, but that's not good enough. I specifically need permissions blocked for sites I've never visited. Needing to visit the site first completely defeats the purpose.

The permissions listed in the settings isn't all of them. How do I turn off ALL permissions for ALL sites. I can turn on specific permissions when I want them. Essentially, how do I recreate functionality that used to exist but was removed from us for whatever reason.

Also, it's a huge security hole! I'm a senior full stack developer. Asking permissions for a user is a great way to fingerprint them. If I accidentally hit "yes" to a few key permissions, I can be fingerprinted. Another reason I should be able to blanket ban these permissions. I just want my browser to be a browser. These permissions do nothing for me but make the experience worse.

There must be a way to turn off this popup off. This is REALLY annoying when it covers a password box and to remove it i must click outside it and I lose focus on the password box. If you must put he box there then at least leave the first part of the password box clear so I cab click on it and not have to click again to get the focus back.

When I went to log into my email it would not let me without confirming my profile information by hitting the "Submit" button. I tried to find a way around this but was not able to. The information had my name, an erroneous zip code of 99999, and my phone number. Since the info was minimal I went ahead and hit submit. It said a confirmation would be sent to my phone, but I did not receive anything. I then logged into my email, but as I was logging in it said, "logging out" and then logged me in. I opened a new tab to research if the ATT profile confirmation was legit or a scam. I was unable confirm either. However, when I opened the new tab I noticed the Tiger favicon between two ATT favicons on my recent history. I attempted to confirm whether this Tiger favicon was part of ATT or Yahoo but could not find out anything it. I am concerned someone may have hacked my email and phone. Can anyone confirm whether this Tiger favicon is legit or who it belongs to?? (photo attached)

Also McAffee notification with all these popups stating that my McAffee protection expired yesterday - I have never had a McAffee notification for a virus or pair for protection from them. Popups are happening every 10 seconds continuously! looks like about 20 or more popups describing different problems with 20 digit numbers and letters as a serial number of the problem!

After all of those years, am I witnessing now that FF literally failing?

How could it become mysterious by that it lets user's location leaked to github even though: - third-party HiFi company VPN is active and in OpenVPN UDP/TCP, Wireguard, IPv6 On/Off, etc... - No bookmark to corresponding website - Cache and website data were so-called cleaned, - Other browsers don't give that symptom, only FF - No related plugin, out of only 3

it's impossible to find out how it lends to the language and region query of this website every time after cleaning. Is FF getting closed app?

Is that a no-way-to-explain effect of language models' evolution is exponentially higher in every 4 months after two years?

I did some research recently on some travel sites.

Today, while trying to research which tab was doing DNS queries to SnapChat (which I never use) I learned about `about:processes`. I found 5 "hidden" tabs from various travel sites (some of which I never visited) running in the background. I did not explicitly hide any tabs.

WHY IS IT ALLOWED FOR SITES TO KEEP OPEN HIDDEN TABS AT ALL WITHOUT TELLING ME ABOUT IT?

This is not conducive to trusting Mozilla.

Regarding the new built in Firefox VPN. If I have Tabs open and Enable the VPN on a New Tab, does it then affect all previously opened Tabs, only the New Tab, only the New Tab and Tabs opened after that initial New Tab, or ? Also, is there a Meter Display or similar so I know how much of the 50GB VPN allotment has been used or is remaining ? Thank you, very kindly ...-- J V

WHAT THE HELL IS THIS???

certificates ImportEnterpriseRoots true

i Active Policy Name Policy Value Certificates ImportEnterpriseRoots true

EXPLAIN PLEASE IF NOT I AM DELETING FIRE FOX