Avatar for Username

Kërkoni te Asistenca

Shmangni karremëzime gjoja asistence. S’do t’ju kërkojmë kurrë të bëni një thirrje apo të dërgoni tekst te një numër telefoni, apo të na jepni të dhëna personale. Ju lutemi, raportoni veprimtari të dyshimtë duke përdorur mundësinë “Raportoni Abuzim”.

Mësoni Më Tepër

Kjo rrjedhë është arkivuar. Ju lutemi, bëni një pyetje të re, nëse keni nevojë për ndihmë.

Why is FireFox not trusting my wildcard root CA when a site is HSTS enabled?

  • 3 përgjigje
  • 2 e kanë hasur këtë problem
  • 2 parje
  • Përgjigjja më e re nga cor-el

jonowebster
jonowebster
more options

The other two major browsers, Google Chrome and Internet Explorer both exempt sites covered by a trust locally installed wildcard root CA's from HSTS checks, however Firefox throws a certificate warning.

There are legitimate reasons to install a wildcard root CA onto users devices, such as for performing HTTPS inspection within a corporate or education environment, however FF no longer allows this.

I can understand the developers are trying to protect against MITM attacks, but this has to be an oversight or bug?

The other two major browsers, Google Chrome and Internet Explorer both exempt sites covered by a trust locally installed wildcard root CA's from HSTS checks, however Firefox throws a certificate warning. There are legitimate reasons to install a wildcard root CA onto users devices, such as for performing HTTPS inspection within a corporate or education environment, however FF no longer allows this. I can understand the developers are trying to protect against MITM attacks, but this has to be an oversight or bug?

Krejt Përgjigjet (3)

philipp
philipp
  • Moderator
more options

what error message/error code are you getting?

user293
user293
more options

Firefox uses it's own certificate store, not the system one tht chrome and IE use. Have you tried installing the certificate in Firefox's certificate store?

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options