Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

Securely connect to websites via https first by default, if not then, use http as fallback. This will prevent downgrade attacks.

  • 2 fhreagra
  • 1 leis an bhfadhb seo
  • 7 views
  • Freagra is déanaí ó cor-el

more options

I have a suggestion. I would like for browsers to connect securely via https first by default to websites. When the browser checks that https is not supported by the website, it should downgrade to http, so do invalid certificates. This will prevent downgrade attacks and make HSTS headers optional. Browsers for years have been connecting to http by default, which I feel is a security risk. A kind of design flaw. Is an option to connect to https first by default a good idea?

All Replies (2)

more options

You may submit suggestions to the developers here: https://input.mozilla.org/en-US/feedback

more options

See: