Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

Цей вебсайт матиме обмежену функціональність, доки ми проводимо його обслуговування для поліпшення роботи. Якщо прочитана стаття не розв'язала вашу проблему і ви хочете поставити питання, наша спільнота підтримки з радістю допоможе вам на @FirefoxSupport у Twitter та /r/firefox на Reddit.

Шукати в статтях підтримки

Остерігайтеся нападів зловмисників. Mozilla ніколи не просить вас зателефонувати, надіслати номер телефону у повідомленні або поділитися з кимось особистими даними. Будь ласка, повідомте про підозрілі дії за допомогою меню “Повідомити про зловживання”

Докладніше

Ця тема перенесена в архів. Якщо вам потрібна допомога, запитайте.

Two Factor Authentication How to Preserve Cookies?

  • 6 відповідей
  • 3 мають цю проблему
  • 26 переглядів
  • Остання відповідь від pjc321

more options

So, I am starting to set up Two Factor Authentication for various logins that I have. As a normal practice, whenever I close any browser I delete all cookies, and when shutting down my computer I do a Norton scan for cookies and delete them. The problem is that this deletes my two factor authentication cookies which I need. I tried setting up an exception, but the cookies get deleted anyway. How do I set this up to work, ie protect specific cookies from deletion?

In Internet Explorer this is extremely easy to do. All you do is put a checkmark next to "Preserve Favorites Website Data".....Done. The equivalent in Firefox you would think is "Site Preferences", but that does not work the same as in IE and the cookies are deleted.

So, I am starting to set up Two Factor Authentication for various logins that I have. As a normal practice, whenever I close any browser I delete all cookies, and when shutting down my computer I do a Norton scan for cookies and delete them. The problem is that this deletes my two factor authentication cookies which I need. I tried setting up an exception, but the cookies get deleted anyway. How do I set this up to work, ie protect specific cookies from deletion? In Internet Explorer this is extremely easy to do. All you do is put a checkmark next to "Preserve Favorites Website Data".....Done. The equivalent in Firefox you would think is "Site Preferences", but that does not work the same as in IE and the cookies are deleted.

Обране рішення

SOLVED.

I finally figured it out trying different combinations. Unlike the way I would expect it to work with the cookie exceptions, the "*" character match only matches the "cookie name", not everything in the path before some point in the "site name". In other words, *.google.com will not protect cookies that are also located under mail.google.com. In that case both *.google.com and *.mail.google.com are required. As a real world example, the exceptions that work with Google's Two Factor Authentication, which covers the 20+ cookies that need to be preserved, are as follows:

(Once again, the forum does not allow me to enter the "star" character on the keyboard in what appears to the forum as a url)

(enter start character here).accounts.google.com (enter start character here).accounts.youtube.com (enter start character here).google.com (enter start character here).mail.google.com (enter start character here).plus.google.com (enter start character here).youtube.com

Читати цю відповідь у контексті 👍 1

Усі відповіді (6)

more options

To begin with, using an external program to delete anything in the Firefox user Profile is fraught with perils. IMO, you are better served using Firefox preferences and maybe an extension to clear cookies upon closing Firefox.

There are many dozens of Cookies extensions available for extending the default features in Firefox. Hopefully you will find an extension that provides the features that you want.

more options

Unfortunately, I was forced to switch back to Internet Explorer as I couldn't get this to work on Firefox, even with a plugin. I also tried it without using an external program. Eventually someone will post the necessary steps somewhere.

Змінено pjc321

more options

Let all cookies expire when Firefox is closed to make them session cookies.

  • Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: Keep until: "I close Firefox"

Create a cookie 'allow' exception for cookies that you would like to keep.

  • Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: Exceptions

Note that clearing "Site Preferences" clears all exceptions for cookies, images, pop-up windows, software installation, passwords, and other website specific data.

Clearing cookies will remove all specified (selected) cookies including cookies with an allow exception that you would like to keep.

See also:

Змінено cor-el

more options

Let all cookies expire when Firefox is closed to make them session cookies.

   Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: Keep until: "I close Firefox" 

Create a cookie 'allow' exception for cookies that you would like to keep.

   Firefox/Tools > Options > Privacy > "Use custom settings for history" > Cookies: Exceptions 

>>>>> Yes, this is the setup I have been using to add exceptions.

Note that clearing "Site Preferences" clears all exceptions for cookies, images, pop-up windows, software installation, passwords, and other website specific data.

Clearing cookies will remove all specified (selected) cookies including cookies with an allow exception that you would like to keep.

>>>>> So, unless I misunderstand these settings, this is telling me that when I select "Clear Recent History", there is no combination of these two switches (Site Preferences and Cookies) that will clear the cookies I don't want without also deleting the cookies that I made exceptions for. Therefore these two settings need to be set so that no cookies are being deleted, and then by setting "Cookies: Keep until: I close Firefox", that this third setting alone is what will be responsible for deleting all cookies except for my exceptions. Correct? Geez, talk about convoluted.

Змінено pjc321

more options

@cor-el.

   So I set it up exactly as you specified and the cookies are still deleted (except for a couple of google.com ones) by simply closing the browser and doing nothing else, not even attempting to clear the history manually.  The only thing I can think of is that I am not specifying the exception properly.  When I set up two factor authentication with Google, twenty two cookies are created.  I will show a small sampling of them:


SITE NAME                                        COOKIE NAME

ACCOUNTS.GOOGLE.COM
     accounts.google.com                   GALX
     .
     .
GOOGLE.COM
     google.com                                     SID
     .
     .
MAIL.GOOGLE.COM
     mail.google.com                            S
     .
     .
PLUS.GOOGLE.COM
     plus.google.com                           OTZ
     .
     .
YOUTUBE.COM
     youtube.com                                 SID
     .
     .

I have tried all the following ALLOW exceptions and none of them work, or there is a completely different issue:

star.google.com ALLOW (NOTE:The forum will not let me enter a star character here. star meaning match everything before.) accounts.google.com ALLOW google.com ALLOW mail.google.com ALLOW plus.google.com ALLOW youtube.com ALLOW

Змінено cor-el

more options

Вибране рішення

SOLVED.

I finally figured it out trying different combinations. Unlike the way I would expect it to work with the cookie exceptions, the "*" character match only matches the "cookie name", not everything in the path before some point in the "site name". In other words, *.google.com will not protect cookies that are also located under mail.google.com. In that case both *.google.com and *.mail.google.com are required. As a real world example, the exceptions that work with Google's Two Factor Authentication, which covers the 20+ cookies that need to be preserved, are as follows:

(Once again, the forum does not allow me to enter the "star" character on the keyboard in what appears to the forum as a url)

(enter start character here).accounts.google.com (enter start character here).accounts.youtube.com (enter start character here).google.com (enter start character here).mail.google.com (enter start character here).plus.google.com (enter start character here).youtube.com

Змінено pjc321