This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How do I set the "When an OCSP server connection fails, treat the certificate as invalid" in Firefox for Android?

  • 1 reply
  • 1 has this problem
  • 8 views
  • Last reply by philipp

mcvickerp
mcvickerp
more options

Due to the security concerns from Heartbleed and Steve Gibson's excellent coverage on certification revocation, I have set "When an OCSP server connection fails, treat the certificate as invalid" on my desktop Firefox and now want to do the same on Firefox for Android. I cannot find anything in the settings menu to allow this. Is it done through about:config and if so, what is the setting name there?

Due to the security concerns from Heartbleed and Steve Gibson's excellent coverage on certification revocation, I have set "When an OCSP server connection fails, treat the certificate as invalid" on my desktop Firefox and now want to do the same on Firefox for Android. I cannot find anything in the settings menu to allow this. Is it done through about:config and if so, what is the setting name there?

All Replies (1)

philipp
philipp
  • Moderator
more options

hello mcvickerp, in about:config you can switch the setting "security.OCSP.require" to true.