We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Cuireadh an snáithe seo sa chartlann. Cuir ceist nua má tá cabhair uait.

How do I bypass HSTS on firefox for one specific site?

  • 1 freagra
  • 1 leis an bhfadhb seo
  • 1 view
  • Freagra is déanaí ó cor-el

otis3
otis3
more options

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

I have been trying to access www.cross-x.com/ for the past few days. Unfortunately, the certificate has expired and the site is using HSTS. If I want to access the site, I am forced to either change my computer time (and undergo all the nastiness associated with that), or use chrome with the --ignore-certificate-errors flag, which compromises my general security. Neither of these options are preferable. Is it possible to bypass HSTS for this site or will firefox force me to wait for the site admins to fix it (doubtful because the certificate expired in early October)? Is there a command line flag, or a patch to the source code that will permit this?

Réiteach roghnaithe

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.

Read this answer in context 👍 1

All Replies (1)

cor-el
cor-el
  • Moderator
  • Top 10 Contributor
more options

Réiteach Roghnaithe

It is not possible to override HSTS related issues.

Did you try to contact this website via email?

You can possibly use Firefox 52.9.0 ESR to access this website as that version allows to make an exception. Best is in such a case not to make a permanent exception.

Make sure to create a new profile for this old version, otherwise you will corrupt your current profile.