Fórum da Comunidade de Firefox

Hello everyone,

I am using Firefox latest release (eg 145.0.1).

At https://developers.cloudflare.com/ssl/post-quantum-cryptography/pqc-support/ , it seems that X25519MLKEM768 is supported since Firefox 132. Do you confirm ?

I ask this question because when I am connecting to https://pq.cloudflareresearch.com/ and activate the network tab before reaching this URL, and looked at the security tab on the right bottom panel, as you can see in the screenshot attached, in the Exchange group keys, I see x25519 and not x25519mlkem768 meaning that Firefox is not PQC ready for key establishment :-(

Best Regards.

Hi, I used to see the HTTPS designation in the Firefox address bar, but no longer see it lately. It does appear in the Edge address bar.

I do appreciate your help.

My mobile package site shows mixed-content warnings on Firefox — how can I fix this? Hello everyone, I run a website, which provides information about mobile phone prices and SIM packages in Bangladesh. Recently, I noticed that when users visit some pages in Firefox, the browser shows a “mixed-content” warning or blocks certain scripts. The same pages load fine in Chrome. All my URLs use HTTPS, and I’m using a LiteSpeed server with Cloudflare CDN. Could this issue be related to how Firefox handles external resources (like embedded operator banners or analytics scripts)? What’s the best way to debug and fix mixed-content problems in Firefox Developer Tools? Any detailed guidance or best practices would be greatly appreciated. Thanks in advance!

I am using Firefox version 140.4.0esr (64bit) Only on Firefox: when trying to connect with Pirates' web page, I have a block which reads:

Security Connection Failed - no common encription algorithems      Error Code: ssl_error_no_cypher overlap

To The Official Site of The Pittsburgh Pirates/pirates.com:Homepage

I have tried to contact them with no luck.

Can you help?

Thanks,

David Martin ([edited email from public community support forum])

I downloads Firefox, Firefox Nightly, Firefox Developer.

All edition not write SSLKEYLOG to file.

I set the SSLKEYLOGFILE env.

How to enable ssl key log file?

Hi guys, Had Firefox as network default browser for decades. Now I have a problem with my DNS pihole filter, firefox just goes around it. I've read countless articles on how to stop this, I've tried DoH 0 and DoH 5, I've placed a file policies.json in a distribution folder. I've tied everything I can find on the net. Nothing and I do mean nothing, had the slightest effect. Firefox goes around whatever I try.

I've spent many, many hours on this please tell me how to kill this, I'm forced to use another browser at the moment, which is painful.

version 142.0.1 64bit W11.

Thank you Bob.

Hello community, I'm an embedded systems developer and we have a ressource constraint IOT device which is using TLS1.2. When we use https:// to access the internal website of the device, Firefox does a complete TLS handshake for each asset to download which renders https:// almost unusable. This happens despite session resumption using session IDs is offered by the device. When accessing the device with Chrome or Edge there's only one handshake and all the following TLS sessions are resumed with the ID of the first handshake. In Firefox security.ssl.disable_session_identifiers is set to false.

Is it intended behaviour that Firefox ignores session IDs for TLS1.2?

Used Firefox version: 142.0 (64-Bit) Windows 11

Thanks in advance.

Johannes

Secure Connection Failed

An error occurred during a connection to www.mofa.gov.sa. Cannot communicate securely with peer: no common encryption algorithm(s).

Error code: SSL_ERROR_NO_CYPHER_OVERLAP

   The page you are trying to view cannot be shown because the authenticity of the received data could not be verified.
   Please contact the website owners to inform them of this problem.

Learn more…

I recently encountered an issue when attempting to login to The Coventry Building Society website using Firefox (desktop PC & Windows 10):- https://www.coventrybuildingsociety.co.uk/ It failed to display the page used to enter the one time passcode used for two factor authentication.

After looking on some forums I discovered this is because 'Strict' tracking protection was enabled. If I change to 'Custom' and uncheck 'Tracking Content' then things work as expected.

I also read on a forum that you can leave tracking protection set to 'Strict' but enter the URL for the problem website under 'Enhanced Tracking Protection -> Manage Exceptions'. I tried entering 'https://www.coventrybuildingsociety.co.uk/' Initially this appeared to work. However, when I tried it again the following day, the page failed to load as before. I had to change back from 'Strict' to 'Custom' and uncheck 'Tracking Content' once again. It's as if the exception URL is ignored in 'Strict' mode.

Am I doing something wrong or is this how it is supposed to work? Do I need to click on the shield icon (to the left of the padlock icon) and turn off 'Enhanced Tracking Protection' every time I visit the website?

Hello if i enter proxy and ip address in firefox in Manual proxy configuration section then when i open a website its asks for username and password my question is can proxy owner see my data and i am using https websites like post data ?

I wanted to completely disable TLS 1.3 when using Firefox, so I set security.tls.version.max to 3 (which corresponds to TLS 1.2). That worked up until I got version 140.0.4 installed - now it completely ignores this setting no matter what I set. I tried using cloudflare-ech.com website for test and it confirms that my browser uses TLS 1.3 with ECH. I also tried modifying security.tls.version.fallback-limit to 0 and security.tls.version.min to 0 to get a possible range of TLS 1.0-1.2, but it still uses TLS 1.3.

I notice with latest firefox updates the https:// is missing from the URL line. When I login to secure sites (ie banking), no https://. I've toggle and play with the http and dns settings. Is this a new feature or should i start changing my passwords? Thanks.

passport.moi.gov.af has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox can only connect to it securely. You can’t add an exception to visit this site.

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

Warning: Potential Security Risk Ahead

Firefox detected an issue and did not continue to dinajpureducationboard.gov.bd. The website is either misconfigured or your computer clock is set to the wrong time.

It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.