Search Support

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

When I download Firefox it is redirecting to an unsecured website download-installer.cdn.mozilla.net is this site safe?

  • 5 uphendule
  • 1 inale nkinga
  • 256 views
  • Igcine ukuphendulwa ngu crankygoat

more options

Hello, Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb

When I drag the Firefox folder to the Applications folder.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.

eg. "Open anyway" or "App Store and Identified developers"

Can someone confirm the following i) Current version of Firefox for Max OS X ii) The current size of the dmg iii) The size of the app iv) whether download-installer.cdn.mozilla.net is a a valid Mozilla.org affiliated website

Isisombululo esikhethiwe

deccles26 said

Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:

If you prefer, you can download manually instead of getting redirected:

https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/

mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.

This could be due to decompression, but I have no idea.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"

That, I know nothing about.

Funda le mpendulo ngokuhambisana nalesi sihloko 👍 1

All Replies (5)

more options

Isisombululo Esikhethiwe

deccles26 said

Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:

If you prefer, you can download manually instead of getting redirected:

https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/

mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.

This could be due to decompression, but I have no idea.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"

That, I know nothing about.

more options

The Firefox application for Mac is signed to make it possible to get them approved by Gatekeeper without having to allow Firefox.


  • Bug 1046306 - [tracking bug] make necessary changes to OS X builds/signing to support 10.9.5
more options

Hello, Then the next question I have is why does the firefox install trigger the f-secure's Flashback removal tool to identify a false positive for dyld_insert_libraries. an Why does Firefox need to insert libraries?

Found DYLD_INSERT_LIBRARIES in /Applications/Firefox.app/Contents/Info.plist LSEnvironment: Removing... /Applications/Firefox.app/Contents/Info.plist -> /tmp/RemoveFlashback.2130.quarantine/Info.plist grep: /etc/launchd.conf: No such file or directory Nothing to quarantine. Quarantined files stored in password-protected zip file /Users/user/flashback_quarantine.zip

more options

https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Introduction/Introduction.html

Why does Firefox need to insert libraries?

Not sure what the instruction in the info.plist is, but DYLD_INSERT_LIBRARIES is a command to run some libraries other than what the application itself will call normally. I would rather expect that this is for first-run setup for the install. False positives are exactly over-detection by decent security apps.

I can't open dmg to look at this stuff, but like governments, security software likes to make a big to-do over completely normal stuff.