Difference between revisions of "Firefox notes"

From Noah.org
Jump to navigationJump to search
Line 42: Line 42:
 
The [http://blog.johnath.com/2008/08/05/ssl-question-corner/ author responds] to the mass outcry against the new Firefox 3 UI for certificate warnings. Apparently he still disagrees. The annoying thing is that he doesn't get it. Most of the people who have been complaining about this this are IT professionals and we understand the risk. We don't need a lecture on "Certificate Security for Dummies". We just want a "Expert" option somewhere in Firefox three to turn off this stupid "feature".
 
The [http://blog.johnath.com/2008/08/05/ssl-question-corner/ author responds] to the mass outcry against the new Firefox 3 UI for certificate warnings. Apparently he still disagrees. The annoying thing is that he doesn't get it. Most of the people who have been complaining about this this are IT professionals and we understand the risk. We don't need a lecture on "Certificate Security for Dummies". We just want a "Expert" option somewhere in Firefox three to turn off this stupid "feature".
  
There is a work around to set "expert" mode using the "about:config" interface. There are a few settings that you need to set.
+
There is a work around to set "expert" mode using the "about:config" interface. This makes the process a tiny bit less painful. This will still require two clicks where one click would do, but this is almost tolerable. Here are the "about:config" settings that you need to set:
  
 
<pre>
 
<pre>
 
+
browser.xul.error_pages.expert_bad_cert = true
 +
browser.ssl_override_behavior = 2
 +
browser.xul.error_pages.enabled = true  # this is the default, so it is probably already set true.
 
</pre>
 
</pre>
  

Revision as of 18:12, 5 January 2009


Type about:config into the address bar or get Configuration Mania.

about:config

Search for these options and modify or toggle them:

about:robots
security.dialog_enable_delay = 0
browser.tabs.closeButtons = 3 # put tab close button on toolbar
browser.sessionstore.max_tabs_undo = 30
browser.search.openintab = True # Searches in search bar open in new tab instead of current window 
browser.urlbar.clickSelectsAll = True # I can't decide which way I like better...
layout.spellcheckDefault = 2 # Spellcheck one-line text fields as well as standard text area fields

view_source.editor.external = True
view_source.editor.path = /usr/bin/gvim

These options may need to be created:

content.switch.threshold = 1000000

Interesting... I need to research these more:

network.protocol-handler

Firefox 3 unsigned SSL cert handling was thought up by an asshole

Error code: sec_error_untrusted_issuer

The author responds to the mass outcry against the new Firefox 3 UI for certificate warnings. Apparently he still disagrees. The annoying thing is that he doesn't get it. Most of the people who have been complaining about this this are IT professionals and we understand the risk. We don't need a lecture on "Certificate Security for Dummies". We just want a "Expert" option somewhere in Firefox three to turn off this stupid "feature".

There is a work around to set "expert" mode using the "about:config" interface. This makes the process a tiny bit less painful. This will still require two clicks where one click would do, but this is almost tolerable. Here are the "about:config" settings that you need to set:

browser.xul.error_pages.expert_bad_cert = true
browser.ssl_override_behavior = 2
browser.xul.error_pages.enabled = true   # this is the default, so it is probably already set true.

These settings are documented here:

Someone has a Firefox 3 Add-on that fixes this. Check out MitM Me.