Re: Firefox, was: Telnet

From	Michael Kjörling <2695bd53d63c@ewoof.net>
Newsgroups	linux.debian.user
Subject	Re: Firefox, was: Telnet
Date	2023-12-04 13:10 +0100
Message-ID	<HHfVV-b4fS-13@gated-at.bofh.it> (permalink)
References	(2 earlier) <HGSwh-aM6O-1@gated-at.bofh.it> <HGXcB-aOYL-5@gated-at.bofh.it> <HGZR8-aQmS-7@gated-at.bofh.it> <HH00N-aQFd-13@gated-at.bofh.it> <HHewN-b3cz-3@gated-at.bofh.it>
Organization	linux.* mail to news gateway

Show all headers | View raw

On 4 Dec 2023 10:29 +0000, from debianuser@woodall.me.uk (Tim Woodall):
> Some years ago I abandoned firefox because there was no way to override
> one of its 'I'm sorry Dave, I'm afraid I can't do that' spasms.
> 
> It's crazy that they make things like certificate pinning *impossible*
> to override.

Firefox deprecated support for HPKP in version 72 in January 2020, in
response to their issue 1412438. https://bugzilla.mozilla.org/show_bug.cgi?id=1412438

https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/72#security

Looks like it was originally implemented in Firefox 35, which dates
back to January 2015. https://developer.mozilla.org/en-US/docs/Mozilla/Firefox/Releases/35#network_security

Apparently present-day versions allow _enabling_ HPKP by adding a
configuration setting which does not exist by default, but finding a
current MDN page even detailing the format of the HPKP HTTP header
appears non-trivial; the Wayback Machine has a copy, but going to the
current page by URL redirects to the one for Expect-CT which _too_ is
deprecated.
https://web.archive.org/web/20211104105929/https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Public-Key-Pins#browser_compatibility
https://en.wikipedia.org/wiki/HTTP_Public_Key_Pinning#Browser_support_and_deprecation

-- 
Michael Kjörling                     🔗 https://michael.kjorling.se
“Remember when, on the Internet, nobody cared that you were a dog?”

Thread

Telnet William Torrez Corea <willitc9888@gmail.com> - 2023-12-02 17:00 +0100
  Re: Telnet Marco Moock <mm@dorfdsl.de> - 2023-12-02 17:10 +0100
    Re: Telnet Greg Wooledge <greg@wooledge.org> - 2023-12-02 17:20 +0100
    Re: Telnet William Torrez Corea <willitc9888@gmail.com> - 2023-12-02 17:40 +0100
  Re: Telnet Andy Smith <andy@strugglers.net> - 2023-12-02 23:00 +0100
    Re: Telnet Michel Verdier <mv524@free.fr> - 2023-12-03 12:10 +0100
      Re: Telnet Marco Moock <mm@dorfdsl.de> - 2023-12-03 17:10 +0100
        Re: Telnet Charles Curley <charlescurley@charlescurley.com> - 2023-12-03 20:00 +0100
          Re: Telnet Greg Wooledge <greg@wooledge.org> - 2023-12-03 20:10 +0100
            Re: Telnet Charles Curley <charlescurley@charlescurley.com> - 2023-12-03 20:30 +0100
              Re: Telnet debian-user@howorth.org.uk - 2023-12-03 21:30 +0100
                Re: Telnet Anssi Saari <anssi.saari@debian-user.mail.kapsi.fi> - 2023-12-04 11:30 +0100
                Re: Telnet gene heskett <gheskett@shentel.net> - 2023-12-04 12:40 +0100
                Re: Telnet debian-user@howorth.org.uk - 2023-12-04 17:20 +0100
                Re: Telnet Anssi Saari <anssi.saari@debian-user.mail.kapsi.fi> - 2023-12-05 11:20 +0100
            Re: Telnet Tim Woodall <debianuser@woodall.me.uk> - 2023-12-04 11:40 +0100
              Re: Firefox, was: Telnet Michael Kjörling <2695bd53d63c@ewoof.net> - 2023-12-04 13:10 +0100
                Re: Firefox, was: Telnet Tim Woodall <debianuser@woodall.me.uk> - 2023-12-04 15:30 +0100
          Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 09:30 +0100
            Re: Telnet Marco Moock <mm@dorfdsl.de> - 2023-12-04 17:30 +0100
              Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 17:40 +0100
          Re: Telnet Marco Moock <mm@dorfdsl.de> - 2023-12-04 09:30 +0100
            Re: Telnet Curt <curty@free.fr> - 2023-12-04 17:30 +0100
              Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 17:40 +0100
                Re: Telnet Curt <curty@free.fr> - 2023-12-04 17:50 +0100
                Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 18:00 +0100
                Re: Telnet <tomas@tuxteam.de> - 2023-12-04 18:40 +0100
                Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 20:10 +0100
                Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 20:30 +0100
                Re: Telnet <tomas@tuxteam.de> - 2023-12-05 06:10 +0100
                Re: Telnet Nicolas George <george@nsup.org> - 2023-12-05 08:50 +0100
                Re: Telnet tomas@tuxteam.de - 2023-12-04 20:30 +0100
          Re: Telnet Nicolas George <george@nsup.org> - 2023-12-04 09:30 +0100
            Re: Telnet Nicholas Geovanis <nickgeovanis@gmail.com> - 2023-12-04 17:20 +0100
            Look, ma no telnet [was: Telnet] <tomas@tuxteam.de> - 2023-12-04 20:00 +0100
              Re: Look, ma no telnet [was: Telnet] <tomas@tuxteam.de> - 2023-12-04 20:10 +0100
              Re: Look, ma no telnet [was: Telnet] Nicolas George <george@nsup.org> - 2023-12-04 20:10 +0100

csiph-web