Firefox 社群討論區

How might I become a trusted SSL certificate issuer? You guys have really been shaking things up the past few years, so that certificates have been the biggest pain in the ass of all time. Do I have to reinvent the entire internet just to sell products online? My 4096 bit SSL certificates generated with openssl have 8x more robust encryption than most of the bilge on the internet, and in a lot of cases, 16x more robust encryption, but your browsers shoot everything down -- literally everything.

People have to make money, guys -- you don't really understand. Nobody cares about your "world view." I don't do business with any of you, you're not the government, I need a secure encrypted website to sell online, but you won't stop complaining that my SSL certificates are somehow "untrusted." I think you have mistaken "untrusted" for "uncrackable by current state of the art," because rumor has it that Google's quantum computer has difficulty cracking 2048 bit SSL certificates.

Why do you need to crack everybody's website encryption anyway? Are you trying to intercept financial transactions? How does that make you more trustworthy than me who doesn't hack anyone? I just want to sell my products in an online storefront. I think you guys really need to get off of your moral high horse, because you seem like the enemy to just about everyone I've ever talked to in my life.

Don't be surprised when I release my own browser and start blocking your crappy 256 bit SSL certificates for being inferior and "insecure." I've kind of had it with Firefox, Chromium, Chrome, Edge, etc... It seems like a colossal waste of time for me to have to release my own damned browser just to sell a freaking t-shirt online in America. This is really capitalism at its worst.

Hi,

I saw that firefox deleted all of its language about not selling user data and that has me concerned. I chose to use firefox in a large part because I did not want my data to be sold and this change has me preparing to change browsers this week. Can you please offer a thorough explanation about why firefox is going back on a policy that it once claimed it "never have and never will"? How is my data being used, sold, and profited off of by firefox with this change? Is there a way for me to opt out of my data being sold?

bsky.app cookie continues to be loaded on computer even after I continually delete it, privacy set to strict and blocked under "managed exceptions, why is it being reloaded when I don't access the site. None of the sites I access are linked to it, only visited once and if this alternative to x continues to set cookies, how can I permanently block it, thought the exceptions list was supposed to keep blocking it. So far it's come back three times, I'll screenshot it next time and attach.

Since the last major update, the title bar is blank. Not missing, blank white. If I use the task bar to shrink and restore it, it appears normally. Sometime in normal use it suddenly appears. A search didn't find anything for me. Any ideas?

Hello,

We are using Firefox on macOS to access web services that require Certificate Based Authentication. Our certificates are stored on YubiKeys PIV slots.

If we plug the token, open Firefox and access the website, it works just fine. The Certificate picker is shown and the OS ask for the PIV PIN to validate the access.

However, if we do the request when the token isn't plugged, Firefox does not ask for it, the website deny the authentication and the context is kept in cache. Requesting again the web site with the token added in between does not restart the certificate lookup and we are forced to close Firefox or move to a private window to make it works.

What is the proper way to avoid this issue? Is it a known bug? Is there a way to configure Firefox to always show the certificate picker even if no certificate are found and then reload the list of certificate based on connections events?

Thanks

After watching this video https://www.youtube.com/watch?v=mAfY_bNJTBI i went to https://www.cloudflare.com/ssl/encrypted-sni/ and did the test. Result is 3/4. (See screenshot below) Secure DNS, check DNSSEC, check TLS 1.3 check Enrypted SNI, fail In Firefox i tried doing exactly what the person did in the video but i dont have the settings he is showing in about:config Why is that? (Below you can see the screenshot, those settings are missing from about:config)

So my question reamins simple, how can i enable Enrypted SNI in Firefox?

Got sick and tired of having to enter payment card info every time, so I decided to RTFM and follow instructions. I worked my way thru all the instructions on found on the forum pages, and was entering the information via about:config, and got to the popup where I was asked to confirm, and clicked the button, then clicked it harder, but nothing happened.

My guess is that my Firefox and/or my Leap15.3 installation has left some file permission read-only and Firefox is unable to save this bit of data, but I really don't want to run Firefox as root. I can say more, but I see there are more boxes to fill.

So, I included a screenshot of what I hope will be the useful part of my config file.

How can I transfer the logins file from an old profile to a new one? When I search online all I get is references for transferring Firefox folders to another computer. Any help gratefully appreciated.

Where or to whom can I send a request / recommendation / beg to get the Firefox browser actually to change something? I know what the community will say -- asked and answered. And no disrespect to the community at all -- it's very valuable and has been helpful to me -- but I am interested in putting this request before someone at Mozilla / Firefox who actually has the authority to decide it and do it.

FYI, not to be too mysterious about it, I think the Privacy & Security setting on Notifications would be improved by putting in a permanent option to let a user stop notifications when he or she has taken a screen shot. Allowing it to be paused now requires the user to go back in and change the setting each time he or she opens Firefox. For me, that's dozens of times a day.

On a broader scale, why not give the user the option permanently? We are, I hope, a land and community of people who prefer choice over mandates, even partial ones, when the substance of the choice or mandate does not pose a risk to others.

Thanks.

Firefox no longer supports Norton Identity Safe Mobile Unlock and Auto Fill UN/PW, anyone have a solution? I have Windows 10 with Norton Extensions enabled and Norton Vault is displayed but does nothing. Firefox is up to date also (that could be the problem; everything worked a week ago.)

I want to set a timeout for the master password. It's clearly a security threat to leave passwords unencrypted. It bothers me more than being prompted for the master password.

I remember we used to be able to set the timeout and it's a pain to go and logout the software security device after logging in to the one thing that needs the master password.

When I login I must enter the verification code that firefox send to my email. The problem is that I receive the email after 20 minutes and the code expire after 5 minutes. Thia happens with all firefox versions : linux, windows & Android