Difference between revisions of "Firefox notes"

From Noah.org
Jump to navigationJump to search
Line 40: Line 40:
 
</pre>
 
</pre>
  
First, I understand what certs are for. There should be an expert option to eliminate the extreme verbosity and all the button clicks. I just don't understand how the Firefox team could do this to us. Then they have the nerve to try to explain to us how certs work and how we don't really want to accept them without a trusted CA signing... blah... blah... blah... Yes, that's what you tell the naive users. Most people complaining are developers. Probably 99% of web developers out there use self-signed certs for their own work and testing.
+
The [http://blog.johnath.com/2008/08/05/ssl-question-corner/ author responds] to the mass outcry against the new Firefox 3 UI for certificate warnings. Apparently he still disagrees. The annoying thing is that he doesn't get it. Most of the people who have been complaining about this this are IT professionals and we understand the risk. We don't need a lecture on "Certificate Security for Dummies". We just want a "Expert" option somewhere in Firefox three to turn off this stupid "feature".
 +
 
 +
There is a work around to set "expert" mode using the "about:config" interface. There are a few settings that you need to set.
 +
 
 +
<pre>
 +
 
 +
</pre>
 +
 
 +
These settings are documented here:
 +
* [http://kb.mozillazine.org/Browser.xul.error_pages.expert_bad_cert browser.xul.error_pages.expert_bad_cert]
 +
* [http://kb.mozillazine.org/Browser.ssl_override_behavior browser.ssl_override_behavior]
 +
* [http://kb.mozillazine.org/Browser.xul.error_pages.enabled browser.xul.error_pages.enabled]
  
 
Someone has a Firefox 3 Add-on that fixes this. Check out [https://addons.mozilla.org/en-US/firefox/addon/10246 MitM Me].
 
Someone has a Firefox 3 Add-on that fixes this. Check out [https://addons.mozilla.org/en-US/firefox/addon/10246 MitM Me].
Now I gotta go look up the internal config settings that will lobotomize Firefox...
 
 
--[[User:Root|root]] 19:53, 3 January 2009 (PST)
 

Revision as of 17:58, 5 January 2009


Type about:config into the address bar or get Configuration Mania.

about:config

Search for these options and modify or toggle them:

about:robots
security.dialog_enable_delay = 0
browser.tabs.closeButtons = 3 # put tab close button on toolbar
browser.sessionstore.max_tabs_undo = 30
browser.search.openintab = True # Searches in search bar open in new tab instead of current window 
browser.urlbar.clickSelectsAll = True # I can't decide which way I like better...
layout.spellcheckDefault = 2 # Spellcheck one-line text fields as well as standard text area fields

view_source.editor.external = True
view_source.editor.path = /usr/bin/gvim

These options may need to be created:

content.switch.threshold = 1000000

Interesting... I need to research these more:

network.protocol-handler

Firefox 3 unsigned SSL cert handling was thought up by an asshole

Error code: sec_error_untrusted_issuer

The author responds to the mass outcry against the new Firefox 3 UI for certificate warnings. Apparently he still disagrees. The annoying thing is that he doesn't get it. Most of the people who have been complaining about this this are IT professionals and we understand the risk. We don't need a lecture on "Certificate Security for Dummies". We just want a "Expert" option somewhere in Firefox three to turn off this stupid "feature".

There is a work around to set "expert" mode using the "about:config" interface. There are a few settings that you need to set.


These settings are documented here:

Someone has a Firefox 3 Add-on that fixes this. Check out MitM Me.