I-Firefox Community Forum

when i typing the address ofsite for connected to site of Iran goverment show a massage that your conection is not protect .what cause for send this massage .

My mobile package site shows mixed-content warnings on Firefox — how can I fix this? Hello everyone, I run a website, which provides information about mobile phone prices and SIM packages in Bangladesh. Recently, I noticed that when users visit some pages in Firefox, the browser shows a “mixed-content” warning or blocks certain scripts. The same pages load fine in Chrome. All my URLs use HTTPS, and I’m using a LiteSpeed server with Cloudflare CDN. Could this issue be related to how Firefox handles external resources (like embedded operator banners or analytics scripts)? What’s the best way to debug and fix mixed-content problems in Firefox Developer Tools? Any detailed guidance or best practices would be greatly appreciated. Thanks in advance!

Hello,

I just did a full windows defender scan and it turns out Trojan:Script/Wacatac.H!ml popped up when it was done and it said the files affected were:

containerfile: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere

file: C:\Users\User\AppData\Local\Mozilla\Firefox\Profiles\.default-release\cache2\entries\InsertHashHere->(GZip)

I removed the hashes or whatever they were behind the entries, I was wondering if this was a false positive? I didn't notice any slowed down or hacked accounts, also windows defender quarantined it. I've also reinstalled Firefox and deleted all folders associated with Mozilla in AppData.

Hi, I used to see the HTTPS designation in the Firefox address bar, but no longer see it lately. It does appear in the Edge address bar.

I do appreciate your help.

Hello Folks, I just importeda a new certificate. Then I wanted to save all my certificates for backup. Selecting "Backup all...", I neter a secure password and click ok just to get the following error message: Failed to create the PKCS #12 backup file for unknown reasons the only button is "OK"

How can I start finding out what is going on and is there any means to save my certificates?

Around 12/28/2024 my LastPass Password Manager extension dropped off my Firefox. When I tried to reinstall nothing happens except the flashing dots, which just go on. The LassPass extension does work on my Chrome browser (only used as a backup, Firefox using Duckduckgo rules)

Steps I have taken. Relaunched firefox. Rebooted laptop Deleted all Lastpass cookies. Did a firefox refresh. Tried to install older version of lastpass, they download but won't let me add.

Please Help? Thanks

Several of my financial accounts give me this error with Firefox. I had to go to Edge to get my tax documents. I'd much rather have a way to get to my sites without leaving Firefox.

HSTS required

Other websites may require HTTP Strict Transport Security (HSTS) and will not allow access with an insecure connection.

I was reading about CSS custom variables at https://developer.mozilla.org/en-US/docs/Web/CSS/CSS_cascading_variables/Using_CSS_custom_properties, and noticed that the example at "Using @property to control inheritance" does not work as described in the latest Firefox (115.21.0esr, 64-bit. on Windows laptop).

More specifically, both the parent and child divs come our in green, but the child div is supposed to come out in cornflowerblue.

Although it is not affecting me yet (I haven't decided whether to use this particular CSS feature), I was wondering if the issue was known.

Warning: Potential Security Risk Ahead

Firefox detected an issue and did not continue to dinajpureducationboard.gov.bd. The website is either misconfigured or your computer clock is set to the wrong time.

It’s likely the website’s certificate is expired, which prevents Firefox from connecting securely. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

1. 1. Резюме выделенного

1. 1. 1. Общее

Выделенный фрагмент содержит **цепочку из трёх X.509 TLS-сертификатов** (формат PEM), а также временну́ю метку **«5–7 минут»** (вероятно, срок действия или контекст страницы).

---

1. 1. 1. Сертификат 1 — Конечный (End-Entity)

- **Субъект:** `accounts.firefox.com` - **Выдан:** Let's Encrypt (R13) - **Действителен:** 15.02.2026 — 16.05.2026 - **Тип:** TLS-сертификат сервера (Domain Validated) - **Алгоритм:** RSA 2048 / SHA-256

---

1. 1. 1. Сертификат 2 — Промежуточный (Intermediate CA)

- **Субъект:** `R13` (Let's Encrypt) - **Выдан:** ISRG Root X1 - **Действителен:** 13.03.2024 — 12.03.2027 - **Назначение:** Подпись конечных сертификатов Let's Encrypt

---

1. 1. 1. Сертификат 3 — Корневой (Root CA)

- **Субъект:** `ISRG Root X1` (Internet Security Research Group) - **Действителен:** 04.06.2015 — 04.06.2035 - **Назначение:** Доверенный корневой центр сертификации; самоподписанный

---

1. 1. 1. Итог

Полная цепочка доверия: `accounts.firefox.com` → `Let's Encrypt R13` → `ISRG Root X1`

Hello to all,

I wanted to use DoH (dnsforge.de) under “maximum protection”, but with one exception: I would like Ecosia.org to be able to place ads for me, because I am convinced of Ecosia and want to support this project. Tested this with Cloudflare as well, setting up an exception here does not work either.

Now the exception set in Firefox has no effect. It should not be due to the DNS provider, because Ecosia.org is not blocked and has even been whitelisted.

What is the expected behavior of the “maximum protection” setting?

Kind regards

I recently encountered an issue when attempting to login to The Coventry Building Society website using Firefox (desktop PC & Windows 10):- https://www.coventrybuildingsociety.co.uk/ It failed to display the page used to enter the one time passcode used for two factor authentication.

After looking on some forums I discovered this is because 'Strict' tracking protection was enabled. If I change to 'Custom' and uncheck 'Tracking Content' then things work as expected.

I also read on a forum that you can leave tracking protection set to 'Strict' but enter the URL for the problem website under 'Enhanced Tracking Protection -> Manage Exceptions'. I tried entering 'https://www.coventrybuildingsociety.co.uk/' Initially this appeared to work. However, when I tried it again the following day, the page failed to load as before. I had to change back from 'Strict' to 'Custom' and uncheck 'Tracking Content' once again. It's as if the exception URL is ignored in 'Strict' mode.

Am I doing something wrong or is this how it is supposed to work? Do I need to click on the shield icon (to the left of the padlock icon) and turn off 'Enhanced Tracking Protection' every time I visit the website?

I think there is a potential security threat and did not continue to www.google.com Please help me to resolve the problem.

Isaac

Trying to enable NextDNS for DNS over HTTP but it shows as not active (TRR_PARENTAL_CONTROL). I do not have any parental controls enabled on this device so im not sure whats causing this isssue.

I used Chrome until two days ago. I just got tired with how shitty the browser was, how bloated it made my computer, and how much Google treats everyone like a data product. However, I use hella google systems from Voice to Chrome to Drive to more and it all worked great together. Choosing to change to Firefox wasn't an easy decision but I knew it was a good one

Which makes it super irritating that some of the functionality is already facing problems. I have shortcuts I built to make it easier to study or do random things so I don't get distracted or tired. One shortcut is clicking a key that should launch UWorld in my default browser & use Lastpass to autologin (I couldn't get it to launch the service but that was a separate issue).

I check if autologin was on for the password on LastPass I've allowed all permissions to the LastPass extension I clear my cookies on UWorld & turned off enhanced tracking protection for the UWorld login portal site

What should I do to fix my one button shortcut again?

I really don't want to go randomly turning off every protection that Firefox gives me to figure it out so I'd appreciate someone who understands the browser better helping me out. Also, bonus points if you can help me build a single shortcut button on my Mac that can launch UWorld & navigate me straight to the question bank. (I do think the issue with autologin on LastPass is going to become more of an issue as I start opening up more websites I used to use on Chrome so I'd rather nip it in the bud before I see the problem occur more often)