Groups > alt.comp.software.firefox > #418

Re: Firefox ESR

From	"J. P. Gilliver (John)" <G6JPG@255soft.uk>
Newsgroups	alt.comp.software.firefox
Subject	Re: Firefox ESR
Date	2021-04-28 21:54 +0100
Organization	255 software
Message-ID	<vbe79dbWucigFwua@255soft.uk> (permalink)
References	<s6akrj$di4$8@dont-email.me> <s6aksm$di4$9@dont-email.me> <lzn6c3qs59j0$.dlg@v.nguard.lh> <XLb1pIPDTZigFwYM@255soft.uk> <fr7vhjq8uft6$.dlg@v.nguard.lh>

Show all headers | View raw

On Wed, 28 Apr 2021 at 14:50:29, VanguardLH <V@nguard.LH> wrote (my 
responses usually follow points raised):
>"J. P. Gilliver (John)" <G6JPG@255soft.uk> wrote:
>
>> VanguardLH <V@nguard.LH> wrote:
>>
>>> So, how often per year do you click on ftp:// hyperlinks in web
>>> pages?
>>
>> About once or twice a year, if that; but the point is, why remove it?
[]
>FTP sends login credentials in the clear (plain text).  In fact, the URL
>syntax for FTP allows adding the username and password into the URL.

I'm not bothered; I haven't used other than a free (anonymous) access 
FTP site for decades (I think since before I had a GUI), and had 
forgotten they existed until this thread.
[]
>subject to sniffing and spoofing (the file you got might not be the one
>you want).

I don't trust any file I download, by whatever protocol (including 
https).
>
>If a web site is going to provide a link to a file, they already have
>their web server in place to handle the download.  Setting up a separate
>FTP server and securing it in a corporate environment, especially to
>ensure what customers get has not been corrupted, requires extra
>manpower just for an alternate and superfluous file transfer scheme.  If

Valid point, but not relevant to whether FTP functionality remains in a 
browser.
[]
>some login credentials, like username is "FTP" (case insensitive), but
>some use the customer's e-mail address.  Well, since FTP traffic is easy
>to sniff, you've divulged your e-mail address.  Yes, you could use a

I do that whenever I post. I don't think I've had 20 spams this year - 
might be less than five.
[]
>sent is okay.  FTP is insecure whether you login or not.  Also, half of
>FTP becomes disabled (to upload) as a first-level stab at preventing
>malicious uploads.  FTP was not designed to be a download-only scheme.

But - at least through a browser - that's how I (and I suspect most 
users who use it through a browser) use it. (I don't think I even know 
_how_ to _up_load through a browser, using FTP or anything else, for 
that matter, other than on websites that have some sort of upload 
button, such as http://www.extractpdf.com/ .)
>
>FTP has no resume function.  If a transfer is interrupted, you start all

That _is_ a valid point. Though I can't remember downloading anything 
big from an FTP site.
[]
>again.  Both FileZilla and WinSCP support resume.  Firefox's FTP client
>is very minimal, like what you can do with the ftp.exe command-line
>client.

(I didn't even know that was there!)
>
>Firefox's FTP code is minimal, but it is part of the codebase for
>Firefox hence subject to periodic code review.  You don't just test new
>code.  You also periodically do retro testing to make sure new code
>hasn't affected old code.

Valid.
>
>> They'll be removing support for http next (insisting on https
>> everywhere).
>
>Yes, they're already in the process for removing HTTP-only support.
>Look in about:preferences#privacy and scroll to the bottom.  I've tried
>the "Enable HTTPS-Only Mode in all windows", but I've hit too many HTTP
>only sites where I had to okay the intervening the prompt.  Eventually
>many more HTTP-only sites will migrate to HTTPS, so the option will
>offer added protection without overwhelming nuisance.
>
>Many sites cannot afford SSL/TLS certificates.  Those can only be
>leased: you buy them for a fixed term, and have to pay to renew.  That

I have no intention of buying anything like that for my (mostly very 
ancient) site. Or organising it even if free.
[]
-- 
J. P. Gilliver. UMRA: 1960/<1985 MB++G()AL-IS-Ch++(p)Ar@T+H+Sh0!:`)DNAf

He [Alfred Kinsey] wouldn't ask 'Have you ever slept with a horse?' He would
say, 'When did you first sleep with a horse?' [RT 2018/5/5-11]

Thread

Firefox ESR Michael Trew <mt999999@ymail.com> - 2021-04-27 23:29 -0400
  Re: Firefox ESR Michael Trew <mt999999@ymail.com> - 2021-04-27 23:30 -0400
    Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-27 23:27 -0500
      Re: Firefox ESR Andy Burns <usenet@andyburns.uk> - 2021-04-28 07:13 +0100
        Re: Firefox ESR Andy Burns <usenet@andyburns.uk> - 2021-04-28 07:17 +0100
        Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-28 02:01 -0500
          Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-28 02:03 -0500
          Firefox ESR Dave <dave@triffid.co.uk> - 2021-04-28 08:57 +0100
            Re: Firefox ESR Andy Burns <usenet@andyburns.uk> - 2021-04-28 10:39 +0100
              Firefox ESR Dave <dave@triffid.co.uk> - 2021-04-28 14:49 +0100
        Re: Firefox ESR PietB <www.godfatherof.nl/@opt-in.invalid> - 2021-04-28 10:00 +0200
      Re: Firefox ESR "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2021-04-28 18:00 +0100
        Re: Firefox ESR PietB <www.godfatherof.nl/@opt-in.invalid> - 2021-04-28 20:55 +0200
        Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-28 14:50 -0500
          Re: Firefox ESR Dave Royal<dave@dave123royal.com> - 2021-04-28 20:46 +0000
          Re: Firefox ESR "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2021-04-28 21:54 +0100
          Re: Firefox ESR Eli the Bearded <*@eli.users.panix.com> - 2021-04-28 21:02 +0000
            Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-29 00:12 -0500
              Keywords header (was: Re: Firefox ESR) Eli the Bearded <*@eli.users.panix.com> - 2021-04-29 17:37 +0000
                Re: Keywords header VanguardLH <V@nguard.LH> - 2021-05-06 05:52 -0500
                Re: Keywords header VanguardLH <V@nguard.LH> - 2021-05-06 06:06 -0500
                Re: Keywords header !@!.invalid (Ï) - 2021-05-06 14:39 +0100
                Re: Keywords header "Adam H. Kerman" <ahk@chinet.com> - 2021-05-06 15:14 +0000
                Re: Keywords header "J. P. Gilliver (John)" <G6JPG@255soft.uk> - 2021-05-06 18:04 +0100
                Re: Keywords header VanguardLH <V@nguard.LH> - 2021-05-08 15:01 -0500
                Re: Keywords header "Adam H. Kerman" <ahk@chinet.com> - 2021-05-08 21:08 +0000
                Re: Keywords header VanguardLH <V@nguard.LH> - 2021-05-08 16:37 -0500
                Re: Keywords header !@!.invalid (Ï) - 2021-05-08 22:52 +0100
                Re: Keywords header Frank Slootweg <this@ddress.is.invalid> - 2021-05-06 17:49 +0000
                Re: Keywords header VanguardLH <V@nguard.LH> - 2021-05-08 15:40 -0500
                Re: Keywords header Miguel Tomar Nogueira <mnogueira@mail.telepac.pt> - 2021-05-09 05:58 +0000
                Re: Keywords header Frank Slootweg <this@ddress.is.invalid> - 2021-05-09 17:24 +0000
                Re: Keywords header Eli the Bearded <*@eli.users.panix.com> - 2021-05-06 18:11 +0000
                Panix spammifying of submissions (was: Keywords header) VanguardLH <V@nguard.LH> - 2021-05-08 16:30 -0500
                Re: Panix spammifying of submissions (was: Keywords header) danny burstein <dannyb@panix.com> - 2021-05-08 21:52 +0000
                Re: Panix spammifying of submissions (was: Keywords header) Eli the Bearded <*@eli.users.panix.com> - 2021-05-10 02:34 +0000
      Re: Firefox ESR Michael Trew <mt999999@ymail.com> - 2021-04-28 13:52 -0400
        Re: Firefox ESR Eli the Bearded <*@eli.users.panix.com> - 2021-04-28 18:29 +0000
          Re: Firefox ESR Michael Trew <mt999999@ymail.com> - 2021-04-28 23:26 -0400
            Re: Firefox ESR Rich <rich@example.invalid> - 2021-04-29 12:52 +0000
        Re: Firefox ESR Rich <rich@example.invalid> - 2021-04-29 12:45 +0000
          Re: Firefox ESR "Adam H. Kerman" <ahk@chinet.com> - 2021-04-29 13:22 +0000
            Re: Firefox ESR Rich <rich@example.invalid> - 2021-04-29 13:53 +0000
              Re: Firefox ESR "Adam H. Kerman" <ahk@chinet.com> - 2021-04-29 18:32 +0000
                Re: Firefox ESR Rich <rich@example.invalid> - 2021-04-29 20:31 +0000
            Re: Firefox ESR "OldbieOne" <me@here.com> - 2021-05-03 14:17 -0400
              Re: Firefox ESR PietB <www.godfatherof.nl/@opt-in.invalid> - 2021-05-08 16:58 +0200
                Re: Firefox ESR "OldbieOne" <me@here.com> - 2021-05-19 10:52 -0400
                Re: Firefox ESR Ant <ant@zimage.comANT> - 2021-05-19 09:10 -0700
                Re: Firefox ESR "Adam H. Kerman" <ahk@chinet.com> - 2021-05-19 16:35 +0000
                Re: Firefox ESR "OldbieOne" <me@here.com> - 2021-05-19 15:16 -0400
                Re: Firefox ESR Job Bautista <jobbautista9@aol.com> - 2021-05-20 18:35 +0800
                Re: Firefox ESR "OldbieOne" <me@here.com> - 2021-05-25 12:32 -0400
                Re: Firefox ESR WaltS48 <schw01@invalid.net> - 2021-05-25 15:16 -0400
          Re: Firefox ESR Miguel Tomar Nogueira <mnogueira@mail.telepac.pt> - 2021-05-09 06:18 +0000
    Re: Firefox ESR chris@here.com - 2021-04-27 23:31 -0500
      Re: Firefox ESR Michael Trew <mt999999@ymail.com> - 2021-04-28 13:53 -0400
  Re: Firefox ESR VanguardLH <V@nguard.LH> - 2021-04-27 23:26 -0500

csiph-web