Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

personal certificate preferences set to “Ask me every time”, does it mean Ask me once per browser session or once per host I connect to

  • 3 个回答
  • 1 人有此问题
  • 16 次查看
  • 最后回复者为 glyfada

glyfada
glyfada

I am constantly allowing my personnel cert to be given to hosts via the UIR dalog box as of 24.3 i think. It definitely did not do this with 17. I know "select one automatically" fixes this but I need it turned on. I read the following http://blog.bimajority.org/2014/04/28/the-latest-way-in-which-firefox-is-broken/ which states "Ask me every time means" once per startup...not once per host. Is this right? Has a bug been introduced to make this box pop up constantly as I surf? or has the behavior changed on purpose...a bug was fixed and it was always suppose to ask every host?

I am constantly allowing my personnel cert to be given to hosts via the UIR dalog box as of 24.3 i think. It definitely did not do this with 17. I know "select one automatically" fixes this but I need it turned on. I read the following http://blog.bimajority.org/2014/04/28/the-latest-way-in-which-firefox-is-broken/ which states "Ask me every time means" once per startup...not once per host. Is this right? Has a bug been introduced to make this box pop up constantly as I surf? or has the behavior changed on purpose...a bug was fixed and it was always suppose to ask every host?

所有回复 (3)

guigs
guigs

Hi if you are asked every time this may be a setting in your certificate settings: Please see http://mzl.la/LRo0Rj

On each cert there is a Trust option:

  • This certificate can identify websites
  • This certificate can identify mail users
  • This certificate can identify software makers

Is the certificate you are using have the first Trust option checked? Is your cert8.db file not hidden in the user profile? Are other certs working?

cor-el
cor-el
  • Moderator

This might be a consequence of enabling false start in Firefox 25 and later.

  • bug 658222 - (tls-false-start) Enable SSL False Start for HTTPS/WebSockets/SPDY connections

Note that you may be able to recover from a wrong choice by clearing the "Active Logins" via clear recent history. This will however log out out from all authenticated sessions

glyfada
glyfada 提问者

THANKS!

I'll consume the info in bug 658222 - (tls-false-start) Enable SSL False Start for HTTPS/WebSockets/SPDY connections

Can you please confirm that the behavior I am seeing is not the intended behavior? and Firefox should not ask on every web site for my personnel cert as I browse? In fact sites that are using web services from different host request my personnel cert for each service/host

Given I have 2 personnel certs, should Firefox ask once per browser session which one I want to use?