Windows 10 will reach EOS (end of support) on October 14, 2025. For more information, see this article.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Facebook fails to load if using br encoding

more options

Yesterday I opened Facebook.com and saw this: "Þk¢¨hõpFrÒê?Ð??×c÷¼ª~ß÷ÓT?L²æŠ?Á,ùZ> ”%YÉ –ík??$A??IШ`¯whªß¥Ð”û~SüzÿZ&¬?­?;…»TtzìV?Ë!¨?Øí–ÞKÿä}ió%Û9’=“#Û??:Æ=Ç^xðõ%k4¸äqh`5?B{ @Ø´‹??-`ÕÍÙÊešr“¢K›¢éRvñÿ[ë3²;7l4°ð?7?PÈ5bσê3?B¨ªîéôŸé?‘]0*q‚ÈÇéüU??Âä1̬÷~‹H???ZÓÎD6sö¢ƒz?ª—Àfqhÿϯ5?«??f$&cù?Ø]Ûg1`@”@“Á 3?(u~â?0iø?Ò‚zé??ŽÛ??ïåÁϼï—ïðÖŸ~?+?kÞ:ï|?“B‡†£Òâ8Ì*™^‘ÚgƆà*¬}Öüˈ+©…?¢·?ò#z»þ2É«ù©qQ†ƒ˜’KíóáW?þð‹ã?oõ v-±?·‹_?oþÉ7Ñn›àj#ô ‡¸â'¼ (??ËØ?¶a÷i_Œ'|³‹?²–?Á:ÌR™Â6Üt?†G=|¸ƒuxøüqèËýßôo‘ÿ-5=Žª¿?™Fœ MO¿h ..." and much more (copy-pasted this because for some reason I couldn't upload a screenshot).

After a bit of digging I found the suggestion to 'Reset' to the default values the network.http.accept-encoding and network.http.accept-encoding.secure settings. In my case they were already set to the default values, so I started messing with them and found this:

network.http.accept-encoding.secure - gzip, deflate, br means https://www.facebook.com is shown as in the example;

network.http.accept-encoding.secure - gzip, deflate means https://www.facebook.com is shown as it should be;

The same problem with the same solution happened on the other PC in my house.

My questions are: What could cause this behavior? What are the disadvantages of not having br as an option for encoding? Are there any security risks?

Yesterday I opened Facebook.com and saw this: "Þk¢¨hõpFrÒêÐ ×c÷¼ª~ß÷ÓTL²æŠÁ,ùZ> ”%YÉ –ík$AIШ`¯whªß¥Ð”û~SüzÿZ&¬­;…»TtzìVË!¨Øí–ÞKÿä}ió%Û9’=“#Û :Æ=Ç^xðõ%k4¸äqh`5B{ @Ø´‹?-`ÕÍÙÊešr“¢K›¢éRvñÿ[ë3²;7l4°ð 7PÈ5bσê3B¨ªîéôŸé‘]0*q‚ÈÇéüU?Âä1̬÷~‹HZÓÎD6sö¢ƒzª—Àfqhÿϯ5«f$&cùØ]Ûg1`@”@“Á 3(u~â0iøÒ‚zéŽÛïåÁϼï—ïðÖŸ~+kÞ:ï|“B‡†£Òâ8Ì*™^‘ÚgƆà*¬}Öüˈ+©…?¢·ò#z»þ2É«ù©qQ†ƒ˜’KíóáW?þð‹ãoõ v-± ·‹_oþÉ7Ñn›àj#ô ‡¸â'¼ (ËØ¶a÷i_Œ'|³‹²– Á:ÌR™Â6Üt†G=|¸ƒuxøüqèËýßôo‘ÿ-5=Žª¿™Fœ MO¿h ..." and much more (copy-pasted this because for some reason I couldn't upload a screenshot). After a bit of digging I found the suggestion to 'Reset' to the default values the <strong>network.http.accept-encoding</strong> and <strong>network.http.accept-encoding.secure</strong> settings. In my case they were already set to the default values, so I started messing with them and found this: <strong>network.http.accept-encoding.secure</strong> - <strong>gzip, deflate, br</strong> means https://www.facebook.com is shown as in the example; <strong>network.http.accept-encoding.secure</strong> - <strong>gzip, deflate</strong> means https://www.facebook.com is shown as it should be; The same problem with the same solution happened on the other PC in my house. My questions are: What could cause this behavior? What are the disadvantages of not having br as an option for encoding? Are there any security risks?

Modified by blue_alien_bg

Chosen solution

Firefox 44+ accepts a new kind of encoding (compression) called Brotli (br) for secure connections and Facebook turned on Brotli encoding a couple days ago.

Kapsersky doesn't know about this encoding and strips it from the HTTP response headers if you have "Inject script" checked in Kapsersky Settings -> Additional -> Network -> Traffic Processing

See also https://forum.kaspersky.com/index.php?showtopic=351027

Read this answer in context 👍 2

All Replies (2)

more options

Chosen Solution

Firefox 44+ accepts a new kind of encoding (compression) called Brotli (br) for secure connections and Facebook turned on Brotli encoding a couple days ago.

Kapsersky doesn't know about this encoding and strips it from the HTTP response headers if you have "Inject script" checked in Kapsersky Settings -> Additional -> Network -> Traffic Processing

See also https://forum.kaspersky.com/index.php?showtopic=351027

more options

James said

Firefox 44+ accepts a new kind of encoding (compression) called Brotli (br) for secure connections and Facebook turned on Brotli encoding a couple days ago. Kapsersky doesn't know about this encoding and strips it from the HTTP response headers if you have "Inject script" checked in Kapsersky Settings -> Additional -> Network -> Traffic Processing See also https://forum.kaspersky.com/index.php?showtopic=351027

Yes, that definitely works. I told Kaspersky not to scan encrypted connections and reset the network.http.accept-encoding.secure to its default value and Facebook opens perfectly.