Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

How do I bypass HSTS on firefox for one specific site?

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by cor-el

otis3
otis3
more options

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

Chosen solution

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.

Read this answer in context 👍 1

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Chosen Solution

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.