![Firefox logo](https://assets-prod.sumo.prod.webservices.mozgcp.net/media/uploads/products/2020-04-14-08-36-13-8dda6f.png)
Why is FireFox not trusting my wildcard root CA when a site is HSTS enabled?
The other two major browsers, Google Chrome and Internet Explorer both exempt sites covered by a trust locally installed wildcard root CA's from HSTS checks, however Firefox throws a certificate warning.
There are legitimate reasons to install a wildcard root CA onto users devices, such as for performing HTTPS inspection within a corporate or education environment, however FF no longer allows this.
I can understand the developers are trying to protect against MITM attacks, but this has to be an oversight or bug?
Toutes les réponses (3)
what error message/error code are you getting?
Firefox uses it's own certificate store, not the system one tht chrome and IE use. Have you tried installing the certificate in Firefox's certificate store?