Where did you install Firefox from? Help Mozilla uncover 3rd party websites that offer problematic Firefox installation by taking part in our campaign. There will be swag, and you'll be featured in our blog if you manage to report at least 10 valid reports!

Avatar for Username

搜尋 Mozilla 技術支援網站

防止技術支援詐騙。我們絕對不會要求您撥打電話或發送簡訊，或是提供個人資訊。請用「回報濫用」功能回報可疑的行為。

Learn More

此討論串已被封存。 如果您有需要幫助，請新增一個新問題

Feature Request: Set security.enterprise_roots.enabled to TRUE on default

contoso
contoso
more options

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

所有回覆 (1)

Wesley Branton
Wesley Branton
more options

It's not too difficult to change the default and lock this preference using the AutoConfig file.

We don't really handle feature requests on this forum. This is more of a technical support area. Your best bet would be to file a bug report and label it as an enhancement. You can also send your feedback to the developers and they will take a look.

Requests, such as changing the default of a preference, are not usually approved, but I'm sure that the developers can explain in greater detail why that preference is set to false by default.

Hope this helps.