Firefox 17 Beta now Forces Secure Connections for List of Selected Domains - DreamTeamDownloads1, FTP Help, Movies, Bollywood, Applications, etc. & Mature Sex Forum, Rapidshare, Filefactory, Freakshare, Rapidgator, Turbobit, & More MULTI Filehosts

Ladybbird · 06-11-12, 21:39

Forcing secured connections protects the privacy and security of users and their data, Mozilla said

IDG News Service - Mozilla introduced a pre-loaded list of domains for Firefox that only can be connected to securely in order to help protect the privacy and security of users.

To force secure connections between the browser and a server, Mozilla uses HSTS (HTTP Strict Transport Security), a mechanism used by servers to indicate that the connecting browser must use a secure connection, wrote Mozilla's David Keeler in a blog post.

When the browser connects to an HSTS server for the first time though, the browser does not know if it should use a secure connection because it never received a HSTS header from that host. "Consequently, an active network attacker could prevent the browser from ever connecting securely (and even worse, the user may never realize something is amiss)", Keeler wrote, adding that setting up the connection that way still leaves it vulnerable to attacks.

As a workaround for that problem, Mozilla has added a list to Firefox with domains that the browser should only connect to securely by default.

"When a user connects to one of these hosts for the first time, the browser will know that it must use a secure connection. If a network attacker prevents secure connections to the server, the browser will not attempt to connect over an insecure protocol, thus maintaining the user's security," Keeler said.

The list has been seeded by domains from Chrome's HSTS preloaded list, that has a similar function to Mozilla's. Google's Chrome forces a secure connection for all google.com subdomains but also added forced HTTPS connections for sites that have requested it. Secure connections are forced for sites such as paypal.com, twitter.com, lastpass.com and torproject.org.

"HSTS in combination with a preloaded list of sites can be a great tool for increasing the security of users," Keeler wrote. The feature is currently only present in Firefox Beta.
END

Has anyone tried this new Firefox 17 yet? If so please post your opinion, especially on this security issue

pop · 07-11-12, 16:33

No I haven't thus never heard of it before now,,,, I wonder if you can make your own list of sites?

online24 · 11-11-12, 14:45

Here is Firefox Beta Notes

Code: [Check Download Links]

http://www.mozilla.org/en-US/firefox/17.0beta/releasenotes/

Ladybbird · 11-11-12, 18:51

What exactly does it mean online24, in simplistic terms, would it mean our privacy be more secure for sites like ours?

I have FFox16 and its frozen and closed down a couple of times, but it might be a new Adobe update thats caused it, who knows

Myk · 11-11-12, 19:16

I not updated my ff for ages, As a lot of the add on's dont work with newer versions

Ladybbird · 11-11-12, 20:01

Yes the old of everything seems to be the best. Im going back to FFox 3.8, it was the best, even Adobe has probs with the newer versions of FFox

06-11-12, 21:39	#1
Ladybbird Join Date: Feb 2011 Posts: 47,613 Thanks: 27,636 Thanked 14,458 Times in 10,262 Posts Awards Showcase Total Awards: 8	Firefox 17 Beta now Forces Secure Connections for List of Selected Domains Forcing secured connections protects the privacy and security of users and their data, Mozilla said IDG News Service - Mozilla introduced a pre-loaded list of domains for Firefox that only can be connected to securely in order to help protect the privacy and security of users. To force secure connections between the browser and a server, Mozilla uses HSTS (HTTP Strict Transport Security), a mechanism used by servers to indicate that the connecting browser must use a secure connection, wrote Mozilla's David Keeler in a blog post. When the browser connects to an HSTS server for the first time though, the browser does not know if it should use a secure connection because it never received a HSTS header from that host. "Consequently, an active network attacker could prevent the browser from ever connecting securely (and even worse, the user may never realize something is amiss)", Keeler wrote, adding that setting up the connection that way still leaves it vulnerable to attacks. As a workaround for that problem, Mozilla has added a list to Firefox with domains that the browser should only connect to securely by default. "When a user connects to one of these hosts for the first time, the browser will know that it must use a secure connection. If a network attacker prevents secure connections to the server, the browser will not attempt to connect over an insecure protocol, thus maintaining the user's security," Keeler said. The list has been seeded by domains from Chrome's HSTS preloaded list, that has a similar function to Mozilla's. Google's Chrome forces a secure connection for all google.com subdomains but also added forced HTTPS connections for sites that have requested it. Secure connections are forced for sites such as paypal.com, twitter.com, lastpass.com and torproject.org. "HSTS in combination with a preloaded list of sites can be a great tool for increasing the security of users," Keeler wrote. The feature is currently only present in Firefox Beta. END Has anyone tried this new Firefox 17 yet? If so please post your opinion, especially on this security issue __________________ PUTIN TRUMP & Netanyahu Will Meet in HELL ..................*SHARKS are Closing in on TRUMP*.......................... *TRUMP WARNS; 'There'll Be a Bloodbath* If I Don't Get Elected'..MAGA - MyAssGotArrested...IT's COMING** PLEASE HELP THIS SITE..Click DONATE & Thanks to ALL Members of ... 1.. THIS SITE IS MORE THAN JUST WAREZ...& TO STOP SPAM-IF YOU WANT TO POST, YOUR FIRST POST MUST BE IN WELCOMES

07-11-12, 16:33	#2
pop Official Site Mascot/Moderator Join Date: Jun 2011 Posts: 1,176 Thanks: 2,013 Thanked 1,002 Times in 636 Posts Awards Showcase Total Awards: 1	Re: Firefox 17 Beta now Forces Secure Connections for List of Selected Domains No I haven't thus never heard of it before now,,,, I wonder if you can make your own list of sites?

11-11-12, 14:45	#3
online24 VIP & Santa Claus in Hiatus Join Date: Apr 2011 Location: Norway Posts: 507 Thanks: 156 Thanked 297 Times in 189 Posts Awards Showcase Total Awards: 2	Re: Firefox 17 Beta now Forces Secure Connections for List of Selected Domains Here is Firefox Beta Notes Code: [Check Download Links] http://www.mozilla.org/en-US/firefox/17.0beta/releasenotes/ __________________ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ ¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤¤ Donate and you will be blessed. Give me a thanks if I deserve it. Have a good day. [SIGPIC][/SIGPIC] (PS.I love Fantasy and SciFi)

11-11-12, 18:51	#4
Ladybbird Join Date: Feb 2011 Posts: 47,613 Thanks: 27,636 Thanked 14,458 Times in 10,262 Posts Awards Showcase Total Awards: 8	Re: Firefox 17 Beta now Forces Secure Connections for List of Selected Domains What exactly does it mean online24, in simplistic terms, would it mean our privacy be more secure for sites like ours? I have FFox16 and its frozen and closed down a couple of times, but it might be a new Adobe update thats caused it, who knows __________________ PUTIN TRUMP & Netanyahu Will Meet in HELL ..................*SHARKS are Closing in on TRUMP*.......................... *TRUMP WARNS; 'There'll Be a Bloodbath* If I Don't Get Elected'..MAGA - MyAssGotArrested...IT's COMING** PLEASE HELP THIS SITE..Click DONATE & Thanks to ALL Members of ... 1.. THIS SITE IS MORE THAN JUST WAREZ...& TO STOP SPAM-IF YOU WANT TO POST, YOUR FIRST POST MUST BE IN WELCOMES

11-11-12, 19:16	#5
Myk Site Uploader Join Date: Aug 2012 Location: U.K Posts: 35,184 Thanks: 330 Thanked 1,817 Times in 1,109 Posts	Re: Firefox 17 Beta now Forces Secure Connections for List of Selected Domains I not updated my ff for ages, As a lot of the add on's dont work with newer versions __________________

11-11-12, 20:01	#6
Ladybbird Join Date: Feb 2011 Posts: 47,613 Thanks: 27,636 Thanked 14,458 Times in 10,262 Posts Awards Showcase Total Awards: 8	Re: Firefox 17 Beta now Forces Secure Connections for List of Selected Domains Yes the old of everything seems to be the best. Im going back to FFox 3.8, it was the best, even Adobe has probs with the newer versions of FFox

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)