Сравнить ревизии
Automatically trust third-party root certificates
Ревизия 267594:
Ревизия 267594 сделанная lsiebert
Ревизия 270648:
Ревизия 270648 сделанная lsiebert
Ключевые слова:
Сводка результатов поиска:
Placeholder 1858531 (https://bugzilla.mozilla.org/show_bug.cgi?id=1858531)
Placeholder 1858531 (https://bugzilla.mozilla.org/show_bug.cgi?id=1858531)
Содержимое:
Placeholder 1858531 (https://bugzilla.mozilla.org/show_bug.cgi?id=1858531)
Starting with [[Find what version of Firefox you are using|version]] 120, Firefox can now automatically trust third-party root certificates installed in your operating system's certificate store. This article explains what this means for you as a Firefox user, how it works, and how you can manage this feature according to your preferences.
=What are third-party root certificates?=
Root certificates are the backbone of the security system that underpins HTTPS web traffic. Firefox, like most web browsers, includes a pre-installed set of trusted root certificates. However, sometimes, users or organizations might need to trust additional certificates not included in this default set. These are known as third-party root certificates.
=Why is this feature important?=
*'''Seamless browsing experience:''' With this update, Firefox will use third-party root certificates added to your operating system, allowing you to seamlessly access more websites without extra configuration.
*'''Convenience for users and organizations:''' Particularly beneficial for enterprise environments or specialized web services that use their own certificates.
=How it works=
When you navigate to a website, Firefox checks if the site's certificate is trusted.
Firefox will now also look for any third-party root certificates you or your organization have installed in the operating system's certificate store.
If a website uses such a certificate, Firefox will trust it automatically, provided the certificate is present in the OS store.
=Security implications=
*'''Trusted administrators:''' These third-party certificates are typically installed by you or your organization's trusted administrators, ensuring they are safe to use.
*'''No compromise on security:''' The feature doesn't lower Firefox's security standards; it merely extends trust to additional certificates deemed secure by you or your organization.
=Manage the feature=
This feature is enabled by default. However, if you wish to turn it off, you can easily do so by following these steps:
*Click the Menu button on the right corner of your screen and select {menu Settings}.
*On the left hand side, select {menu Privacy & Security} and scroll down until you see the ''Certificates'' section.
*Uncheck the ''Allow Firefox to automatically trust third-party root certificates you install'' option.
*;[[Image:Automatically trust third-party root certificates]]