X
Tap here to go to the mobile version of the site.

Support Forum

How do I bypass HSTS on firefox for one specific site?

Posted

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

Chosen solution

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.

Read this answer in context 1
Quote
cor-el
  • Top 10 Contributor
  • Moderator
17703 solutions 160151 answers

Chosen Solution

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.

It is not possible to override HSTS related issues. Did you try to contact this website via email? You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception. *https://download-installer.cdn.mozilla.net/pub/firefox/releases/52.9.0esr/ Make sure to create a new profile for this old version, otherwise you will corrupt your current profile. *https://support.mozilla.org/en-US/kb/profile-manager-create-and-remove-firefox-profiles
Was this helpful to you? 1
Quote
Ask a question

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.