Firefox

17301 readers

113 users here now

A place to discuss the news and latest developments on the open-source browser Firefox

founded 4 years ago

MODERATORS

[email protected]

HTTP warning now has 5s delay before "Continue to HTTP Site" is clickable (lemmy.ml)

submitted 10 months ago by [email protected] to c/[email protected]

17 comments fedilink hide all child comments

This has started happening a while ago (previously there was not perceptible delay) and luckily I don't have to visit HTTP sites very often but it is annoying and I would like to get rid of it.

I know HTTP is bad TYVM. I only use this HTTPS-only mode to forcibly upgrade to HTTPS whenever possible and be notified if it doesn't work.

Does anyone know why this is happening and how to disable it?

#Firefox @[email protected]

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 5 points 10 months ago (2 children)

That would mean malware can use your local ip and hostfile for mitm attacks.

[–] [email protected] 12 points 10 months ago

Isn't it already game over if malware can write into your hostfile? At least on Windows you need some elevated access for it, which means such malware could just read/write the target program's memory directly instead of resorting to clunky MitM.

[–] [email protected] 5 points 10 months ago

If malware can write my hosts file it's probably all over anyways, it has admin access and just keylog everything and pull passwords directly from browsers.

I'm not saying it should be the default, I just want an about:config option to disable them (they used to have one for the insecure password field but it no longer works).