Tuesday, October 25, 2016
Submit your own News for
inclusion in our Site.
Click here...
Breaking News
Google Raises 3rd Quarter Lobbying But Spending Falls Behind AT&T
Kingston Ships the HyperX Alloy FPS Gaming Keyboard
Portrait Mode Available on iPhone 7 Plus With iOS 10.1
Android Devices Vulnerable To Physical RAM Attack
Nokia Phones To Reborn In India Next Year, Hon Hai to Manufacture Them
New Lenovo Systems Commercial Desktops and Notebooks Are Featuring 7th Generation AMD PRO Processors
Apple Watch Nike+ Arrives Friday, October 28
These Are The New Xbox One S Bundles For This Holiday
Active Discussions
Which of these DVD media are the best, most durable?
How to back up a PS2 DL game
Copy a protected DVD?
roxio issues with xp pro
Help make DVDInfoPro better with dvdinfomantis!!!
menu making
Optiarc AD-7260S review
cdrw trouble
 Home > News > General Computing > Firefox...
Last 7 Days News : SU MO TU WE TH FR SA All News

Friday, November 02, 2012
Firefox Enforces Secure HSTS Connections For Selected Domains

Mozilla introduced a pre-loaded list of domains for Firefox that only can be connected to securely in order to help protect the privacy and security of users.

HSTS (HTTP Strict Transport Security) is a mechanism by which a server can indicate that the browser must use a secure connection when communicating with it. It can be an effective tool for protecting the privacy and security of users and their data. However, when connecting to an HSTS host for the first time, the browser won't know whether or not to use a secure connection, because it has never received an HSTS header from that host. Consequently, an active network attacker could prevent the browser from ever connecting securely.

To mitigate this attack, Mozilla has added to Firefox a list of hosts that want HSTS enforced by default. When a user connects to one of these hosts for the first time, the browser will know that it must use a secure connection. If a network attacker prevents secure connections to the server, the browser will not attempt to connect over an insecure protocol, thus maintaining the user?s security.

The "preload list" has been seeded with entries from Chrome's list of a similar function. To build the preload list, a request is sent to every host with 'mode: "force-https"' on Chrome's list. Only if a host responds with a valid HSTS header with an appropriately large max-age value do Mozilla includes it in its list. Mozilla also see if the includeSubdomains value for the entry on Chrome?s list is the same as what they receive in the response header.

Google's Chrome forces a secure connection for all google.com subdomains but also added forced HTTPS connections for sites that have requested it.

The feature is currently only present in Firefox Beta.

Facebook To Educate New Users Over Privacy        All News        Apple's Updated Samsung Statement Still Not an Apology
Facebook To Educate New Users Over Privacy     General Computing News      Apple's Updated Samsung Statement Still Not an Apology

Get RSS feed Easy Print E-Mail this Message

Related News
Next Firefox Browser Will Block Adobe's Flash
Latest Firefox Browser Brings Improvements To Tabs and Video
Firefox Edges Out Microsoft For First Time in Browser Wars
Firefox for iOS Gets Security Features
Firefox To Continue Support For Windows XP Support
Firefox OS Still Alive In Panasonic New Ultra HD TVs
Mozilla Pulls The Plug On Firefox Smartphone OS
Firefox Can Now Get Push Notifications From Your Favorite Sites
Firefox 64-bit Browser Released For Windows PCs
Mozilla Nixes Firefox OS, Announces Content Blocker for iOS
Firefox Now Available On iOS
Mozilla Engances Yahoo Search Experience for Firefox

Most Popular News
Home | News | All News | Reviews | Articles | Guides | Download | Expert Area | Forum | Site Info
Site best viewed at 1024x768+ - CDRINFO.COM 1998-2016 - All rights reserved -
Privacy policy - Contact Us .