Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Lolu chungechunge lwabekwa kunqolobane. Uyacelwa ubuze umbuzo omusha uma udinga usizo.

When I download Firefox it is redirecting to an unsecured website download-installer.cdn.mozilla.net is this site safe?

  • 5 uphendule
  • 1 inale nkinga
  • 848 views
  • Igcine ukuphendulwa ngu crankygoat

more options

Hello, Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb

When I drag the Firefox folder to the Applications folder.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.

eg. "Open anyway" or "App Store and Identified developers"

Can someone confirm the following i) Current version of Firefox for Max OS X ii) The current size of the dmg iii) The size of the app iv) whether download-installer.cdn.mozilla.net is a a valid Mozilla.org affiliated website

Isisombululo esikhethiwe

deccles26 said

Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:

If you prefer, you can download manually instead of getting redirected:

https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/

mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.

This could be due to decompression, but I have no idea.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"

That, I know nothing about.

Funda le mpendulo ngokuhambisana nalesi sihloko 👍 1

All Replies (6)

more options

Isisombululo Esikhethiwe

deccles26 said

Each time I try to download the new version of Firefox (70.0.1) it is redirecting to download-installer.cdn.mozilla.net however the link displayed from the right click of the mouse is https://download.mozilla.org/?product=firefox-latest-ssl&os=osx&lang=en-US

Yes, the "latest" is computed and redirected to a particular file. But it should be HTTPS and not HTTP:

If you prefer, you can download manually instead of getting redirected:

https://download-installer.cdn.mozilla.net/pub/firefox/releases/70.0.1/mac/en-US/

mozilla.net is an official Mozilla domain (as well as mozilla.org and mozilla.com).

I am also trying to find out the file size of the dmg (mine says 72.5Mb) and the Firefox app which seems to be very bloaty in excess of 203.9 Mb When I drag the Firefox folder to the Applications folder.

This could be due to decompression, but I have no idea.

However I have gatekeeper set to Allow Apps downloaded from the App Store. YET Firefox opens without having to go into gatekeeper and make changes.
eg. "Open anyway" or "App Store and Identified developers"

That, I know nothing about.

more options

The Firefox application for Mac is signed to make it possible to get them approved by Gatekeeper without having to allow Firefox.


  • Bug 1046306 - [tracking bug] make necessary changes to OS X builds/signing to support 10.9.5
more options

Hello, Then the next question I have is why does the firefox install trigger the f-secure's Flashback removal tool to identify a false positive for dyld_insert_libraries. an Why does Firefox need to insert libraries?

Found DYLD_INSERT_LIBRARIES in /Applications/Firefox.app/Contents/Info.plist LSEnvironment: Removing... /Applications/Firefox.app/Contents/Info.plist -> /tmp/RemoveFlashback.2130.quarantine/Info.plist grep: /etc/launchd.conf: No such file or directory Nothing to quarantine. Quarantined files stored in password-protected zip file /Users/user/flashback_quarantine.zip

more options

If you are facing this type of issue on your system you must visit an SSL certified WEbsite, which is secure enough. If you are not so familiar with this you must search about What is an SSL certificate and how it works on the internet.

more options

https://developer.apple.com/library/archive/documentation/General/Reference/InfoPlistKeyReference/Introduction/Introduction.html

Why does Firefox need to insert libraries?

Not sure what the instruction in the info.plist is, but DYLD_INSERT_LIBRARIES is a command to run some libraries other than what the application itself will call normally. I would rather expect that this is for first-run setup for the install. False positives are exactly over-detection by decent security apps.

I can't open dmg to look at this stuff, but like governments, security software likes to make a big to-do over completely normal stuff.