When I download Firefox it is redirecting to an unsecured website download-installer.cdn.mozilla.net is this site safe?
Hello, Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US
I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb
When I drag the Firefox folder to the Applications folder.
However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"
Can someone confirm the following i) Current version of Firefox for Max OS X ii) The current size of the dmg iii) The size of the app iv) whether download-installer.cdn.mozilla.net is a a valid Mozilla.org affiliated website
Vybrané riešenie
deccles26 said
Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US
Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:
If you prefer, you can download manually instead of getting redirected:
https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/
mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).
I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.
This could be due to decompression, but I have no idea.
However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"
That, I know nothing about.
Čítať túto odpoveď v kontexte 👍 1Všetky odpovede (6)
Vybrané riešenie
deccles26 said
Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US
Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:
If you prefer, you can download manually instead of getting redirected:
https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/
mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).
I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.
This could be due to decompression, but I have no idea.
However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"
That, I know nothing about.
THANK YOU!
The Firefox application for Mac is signed to make it possible to get them approved by Gatekeeper without having to allow Firefox.
- Bug 1046306 - [tracking bug] make necessary changes to OS X builds/signing to support 10.9.5
Hello, Then the next question I have is why does the firefox install trigger the f-secure's Flashback removal tool to identify a false positive for dyld_insert_libraries. an Why does Firefox need to insert libraries?
Found DYLD_INSERT_LIBRARIES in /Applications/Firefox.app/Contents/Info.plist LSEnvironment: Removing... /Applications/Firefox.app/Contents/Info.plist -> /tmp/RemoveFlashback.2130.quarantine/Info.plist grep: /etc/launchd.conf: No such file or directory Nothing to quarantine. Quarantined files stored in password-protected zip file /Users/user/flashback_quarantine.zip
If you are facing this type of issue on your system you must visit an SSL certified WEbsite, which is secure enough. If you are not so familiar with this you must search about What is an SSL certificate and how it works on the internet.
Why does Firefox need to insert libraries?
Not sure what the instruction in the info.plist is, but DYLD_INSERT_LIBRARIES is a command to run some libraries other than what the application itself will call normally. I would rather expect that this is for first-run setup for the install. False positives are exactly over-detection by decent security apps.
I can't open dmg to look at this stuff, but like governments, security software likes to make a big to-do over completely normal stuff.