This site will have limited functionality while we undergo maintenance to improve your experience. If an article doesn't solve your issue and you want to ask a question, we have our support community waiting to help you at @FirefoxSupport on Twitter and/r/firefox on Reddit.

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

A few questions about certification.

  • 2 replies
  • 1 has this problem
  • 1 view
  • Last reply by sam1275

more options

Hello.

My internet is pretty unsafe and I decide to gain some security. I have a few questions:

1. How to disable "permanently store this exception" option for all invalid certificates? This can be archived by using private mode, but I want it in normal browsing.

2. How to force block any website that have certification issues, that is, making user cannot bypass the warn just by press "confirm security exception" button? I feel that option leave user too easy to get into a dangerous site. I don't even consider that a serious issue before, until I actually visit a hijacked site, and Firefox tries to protect me by that "inconspicuous" and easy-to-bypass warning.

3. It seems there's many problems with WoSign and StartCom CAs, so should I just distrust them in the Firefox setting?

Thanks.

Hello. My internet is pretty unsafe and I decide to gain some security. I have a few questions: 1. How to disable "permanently store this exception" option for all invalid certificates? This can be archived by using private mode, but I want it in normal browsing. 2. How to force block any website that have certification issues, that is, making user cannot bypass the warn just by press "confirm security exception" button? I feel that option leave user too easy to get into a dangerous site. I don't even consider that a serious issue before, until I actually visit a hijacked site, and Firefox tries to protect me by that "inconspicuous" and easy-to-bypass warning. 3. It seems there's many problems with WoSign and StartCom CAs, so should I just distrust them in the Firefox setting? Thanks.

Modified by sam1275

All Replies (2)

more options

Why do you feel your internet is unsafe?

The best things that you can do to protect yourself are as follows:

more options

Tyler Downer said

Why do you feel your internet is unsafe? The best things that you can do to protect yourself are as follows:

Because the ISP/government is continuously hijack/poisoning the DNS and even GBP routes, I'll get more phishing sites than correct ones if not using VPN. Thank you and I already knew those in your suggestions, but I want to be more safe.