Join the AMA (Ask Me Anything) with the Firefox leadership team to celebrate Firefox 20th anniversary and discuss Firefox’s future on Mozilla Connect. Mark your calendar on Thursday, November 14, 18:00 - 20:00 UTC!

为提升您的使用体验，本站正在维护，部分功能暂时无法使用。如果本站文章无法解决您的问题，您想要向社区提问的话，请到 Twitter 上的 @FirefoxSupport 或 Reddit 上的 /r/firefox 提问，我们的支持社区将会很快回复您的疑问。

Avatar for Username

搜索 | 用户支持

防范以用户支持为名的诈骗。我们绝对不会要求您拨打电话或发送短信，及提供任何个人信息。请使用“举报滥用”选项报告涉及违规的行为。

详细了解

话题已存档。 如果需要帮助请提出新问题。

Feature Request: Set security.enterprise_roots.enabled to TRUE on default

contoso
contoso
more options

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

所有回复 (1)

Wesley Branton
Wesley Branton
more options

It's not too difficult to change the default and lock this preference using the AutoConfig file.

We don't really handle feature requests on this forum. This is more of a technical support area. Your best bet would be to file a bug report and label it as an enhancement. You can also send your feedback to the developers and they will take a look.

Requests, such as changing the default of a preference, are not usually approved, but I'm sure that the developers can explain in greater detail why that preference is set to false by default.

Hope this helps.