所有产品 Support Forum

OK, I have Firefox (Windows 10 AMD64, desktop) configured to delete history when I close it.

So, I see that regular webiste cookies are deleted.

But are the HSTS website "super cookies" deleted?

https://ipleak.com/articles/what-is-hsts-super-cookies What are HSTS Super cookies and why are they dangerous?

thanx.

Without notice, Thunderbird today required me to sign-in to my Google account and then produced a window in which it said it wanted to access to my mail, contacts and calendar; in order to compose, send, share, delete permanently, among actions on my personal content. I tried to "Deny" (see below) but the window just returned and returned and could not be deleted. (see "Uploaded images", below for the content of this window).

Is this a scam? Or the result of a hacker?

How do I disable secure connections for local domains? like http://nas.local or http://nas.home.arpa ?

I search for the subject but nothing came up. Apologies if this has been asked before.

Hi.

I have several internal sites, each signed with their own internal CA/subCA. These CAs are all named the same, but have different crypto materials.

If I import just 1 CA into FF (directly or in Windows store with security.enterprise_roots.enabled ), the site with that CA works fine (browser warning is not presented), but ALL those other internal sites give this error:

An error occurred during a connection to 10.1.1.1. Peer’s certificate has an invalid signature. Error code: SEC_ERROR_BAD_SIGNATURE

with no option to add a security exception.

If I add the CA for another site, that one works as well, the others won't. If I remove all the internal CAs, all the sites start working again (with browser warning, ofc.).

I tried in Chrome and Edge and I get the option to create a security exception for the sites for which I did not install their CA, which looks like the ideal/preferrable option to me.

Is this as intended (and why?) or can it be fixed?

This looks somewhat similar to this: https://support.mozilla.org/questions/1170738

Thank you. Davide.

I've added https://x.com as an exception site but it is still blocked.

This is outright censorship which is something fascists do.

Tell me how to fix your browser so I may access x.com again or I stop using Firefox forever.

Hello, I need a bit of help. Specs: FireFox 127.0.2, Apple Silicon M2, Sonoma. For some reason in my privacy & security settings with enhanced tracking protection, it's set on Standard which I believe is the default but after some time passes it switches itself to Strict, or Custom settings, then none of my pages load properly or not at all. Can someone tell me how I can get it to stay on the Standard?

Thanks

I'm trying to set my DNS settings in Firefox Nightly to a custom service. But i am having nothing but problems.

"Firefox Nightly 128.0a1 (Build #2016025199)"

I want to use one of these settings for the secured w/ECS:Malware blocking, DNSSEC Validation, ECS enabled.

My only problem is I'm not sure which format of the address options I should be inputting in the DNS settings in the about:config

Please help.

Secured w/ECS: Malware blocking, DNSSEC Validation, ECS enabled

IPv4 9.9.9.11 149.112.112.11

IPv6 2620:fe::11 2620:fe::fe:11

HTTPS https://dns11.quad9.net/dns-query

TLS tls://dns11.quad9.net

P S. Yes I know I can set a custom DNS address in the connections settings of my android device. And it works most of the time. I however want my own settings in the browser itself.

Thank you in advance

I use Firefox with a VPN. I also use the Chameleon extension to alter my fingerprint. When I log into Messenger.com it asks if this is me and gives my actual, physical location. I've checked in settings under location and it doesn't show any sites requesting my location. I have it open in one of the tabs where it's showing my location. I have block all location requests checked. How can I get Firefox to not show my physical location?

Also on this page, it gives I'm using Firefox and the OS I'm using. Both are supposed to be changed for fingerprinting protection.

This looks like it could be a big security loophole. Any help is appreciated.

Lately I have been getting a lot of spam and have identified all coming into my inbox as spam. Now many are automatically moved to junk mail box and that is a good thing. Unfortunately it also seems to be slowing Thunderbird down. I am afraid that many of the "Filters" generated may be duplicated. Is it possible to see them and maybe edit them to reduce the impact on my system?

I've used Thunderbird for years using a POP setting; Network Solutions would prefer that I use IMAP. I don't know the difference, but they must and prefer that it be IMAP (netsol-imap-oxcs.hostingplatform.com) (PORT: 993. When bringing up the settings in my mail account, it doesn't allow anyone to change that field. What can I do? I want to use Thunderbird; because of this particular setting I haven't been able to, and must instead log on to Network Solutions and go through their email interface. Thank you.

I've appreciated using Thunderbird for an ad-free Hotmail experience for quite some time. I've changed my Hotmail password every few weeks lately and Thunderbird worked fine when I entered the new password at the prompt when Thunderbird started.

Just now however, I needed to get into my Microsoft account that uses the same password as my Hotmail account. My login to Microsoft failed. Trying to understand why, I looked in Thunderbird at the saved password for Hotmail's server:

oauth://login.microsoftonline.com (https://outlook.office.com/IMAP.AccessAsUser.All

https://outlook.office.com/POP.AccessAsUser.All 
https://outlook.office.com/SMTP.Send offline_access)

The saved password was a 464 character long ASCII string totally irrelevant to the password I'd selected for Hotmail and Microsoft.

I went through the password change process for Hotmail, was then able to get into my Microsoft account and restarted Thunderbird. As usual, Thunderbird asked for the new password. I entered it and was then able to receive new mail from the Hotmail server in Thunderbird. However, again, the saved password in Thunderbird for Hotmail was not the password I'd entered.

Next, I deleted the saved passwords in Thunderbird, restarted it and this time it prompted me to be sure I'd downloaded it from a reliable source. I've never seen that prompt before. It came with my Linux Mint installation, so I thought it would be safe, but again there's an irrelevant password saved for my Hotmail account.

It's like it eventually changes my password for Hotmail and Microsoft since I can get mail through Thunderbird with the odd password it saves, but if I use what should be my password for Hotmail or my Microsoft account via a web page interface, the password doesn't work.

I'll have to stop using Thunderbird if this continues.

Dear Sir/Madam,

I use the Thunderbird email client on my Microsoft Windows 10 desktop tower PC in order to access my Gmail account using POP3, using "only" my email address and password.

However, I note that Google plan to introduce more stringent and tighter sign in/authentication methods from September 2024 as follows:

https://support.google.com/a/answer/6260879?hl=en

https://support.google.com/a/answer/6260879?hl=en

Does Thunderbird have a workaround for Google's plans please?

Thanking you.

How can I use Firefox for private browsing or anything when you cannot even keep me as your Default Browser? Edge changes it everytime!! They override you so they have taken over my computer so I can't have firefox as default browser or anything? Thank you, Margaret P Miller peggiemiller1209@gmail.com

Hi

I cant find an Add-On for blocking ads in newsletters.

How can I block the very annoying Ads in newsletters? These newsletters from mainstream newspapers are a real imposition.

How-To block ads in mails with Thunderbird?

I have had a client for whom I use an outlook.office365.com "thing" and get/send e-mails through their domain.

In prior Tbird releases it just accepted whatever credentials Tbird presents

Recent release - I still authenticate just fine - can receive and transmit e-mails without issue. But every couple of minutes I get a nag screen asking me to login to login.live.com. I dismiss the nag screen, and can still transmit and receive e-mails. This screen is initiated by a Thunderbird process (I know this because if I kill a Thunderbird process in task manager, the screen goes away and everything works as expected. )

I really want no part of the Windows "Live" thing, and have no idea of what "helpful" changes it wants to make, and so I do not login.

"Settings" are set up with cookies set to yes. OAuth2 seems to be selected.

I see no settings that I could use to suppress the nag ... is there anything I can do???

Thanks in advance.

Jonathan

Hello,

I appreciate very much the recent security changes in Firefox 127, about mixed content. I think it really does improve both security and privacy, but I have HTTPS websites in a local network (private IP addresses) that load some images from a local IP camera over HTTP. I do not have control over these IP camera images, so as a temporary workaround I am allowing the whole website to be delivered over plain HTTP.

It's not a huge security issue, because it's on a local network which I access over the Internet via a VPN, but I would prefer to keep the website on HTTPS and allow mixed content for this specific IP address, so to keep the protection fully enabled when I browse the Internet.

Is there a way to enter a specific IP address in an exception list, so to selectively allow mixed content? Or, in alternative, is it possible to specify that all web requests from private IP addresses (RFC 1918) should allow mixed content?

Many thanks,

Piero