Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How to edit HSTS (HTTP Strict Transport Security) settings?

  • 3 replies
  • 8 have this problem
  • 1 view
  • Last reply by c3333846

op600
op600
more options

I want the connections to some particular sites to be always using https, so I need to edit Firefox's HSTS settings, but I don't know where the HSTS setting file is. Can anyone tell me how to accomplish this task?

I use both Ubuntu 14.04.1 and Windows 8. So solutions for Linux and Windows are both welcome and needed.

(I know there is an add-on called "Force TLS," but I hope to do it without an add-on.)

I want the connections to some particular sites to be always using https, so I need to edit Firefox's HSTS settings, but I don't know where the HSTS setting file is. Can anyone tell me how to accomplish this task? I use both Ubuntu 14.04.1 and Windows 8. So solutions for Linux and Windows are both welcome and needed. (I know there is an add-on called "Force TLS," but I hope to do it without an add-on.)

Modified by op600

All Replies (3)

philipp
philipp
  • Moderator
more options

hello, please use the addon you already know about in order to edit these settings: https://addons.mozilla.org/firefox/addon/force-tls/

the hsts settings would be stored within the permissions.sqlite database in your profile but manually editing it could do more harm than good...

op600
op600 Question owner
more options

thank you for your reply. I'll go install Force-TLS.

c3333846
c3333846
more options

Hello,

unfortunately the mentioned AddOn does not work for me.

I added domain.com and ticket all subdomains: I can still access the site using only HTTP.

So the question remains: How do I remove/add HSTS for a site.

The following steps for removing HSTS were not successful: - Disable all AddOns (just to be sure) - Close all tabs - Clear cookies for the site - Clear all browser cache - Select forget about this site in history - Restart Firefox

Using a new profile for Firefox did work!

Should I open a new question for this?

Modified by c3333846