Firefox 83 introduces HTTPS-Only Mode

#1

Post by tomwas54 » Tue, Nov 17, 2020, 9:17 AM UTC

Firefox 83 introduces HTTPS-Only Mode
blog.mozilla.org

Re: Firefox 83 introduces HTTPS-Only Mode

#2

Post by StreamBright » Tue, Nov 17, 2020, 9:41 AM UTC

What happens if i need to access localhost on http?

Re: Firefox 83 introduces HTTPS-Only Mode

#3

Post by jstsch » Tue, Nov 17, 2020, 9:43 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

From the article: Firefox asks for your permission before connecting to a website that doesn’t support secure connections.

Re: Firefox 83 introduces HTTPS-Only Mode

#4

Post by fiskfiskfisk » Tue, Nov 17, 2020, 9:43 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

It's explained in the post:

> For the small number of websites that don’t yet support HTTPS, Firefox will display an error message that explains the security risk and asks you whether or not you want to connect to the website using HTTP. Here’s what the error message looks like: ..

Re: Firefox 83 introduces HTTPS-Only Mode

#5

Post by iso1631 » Tue, Nov 17, 2020, 9:43 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

"Firefox asks for your permission before connecting to a website that doesn’t support secure connections."

That suggests it will ask you for permission, presumably with a "always remember this choice" option.

Re: Firefox 83 introduces HTTPS-Only Mode

#6

Post by pedrogpimenta » Tue, Nov 17, 2020, 9:43 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

You could start by reading the article, even only the first paragraph:

> Firefox asks for your permission before connecting to a website that doesn’t support secure connections.

Re: Firefox 83 introduces HTTPS-Only Mode

#7

Post by CamperBob2 » Tue, Nov 17, 2020, 9:44 AM UTC

There had better be an about:config option to turn this stupidity off.

Perhaps one of the downvoters can explain why the implied opinion "Nobody should be able to access your site without clearance from a third-party gatekeeper" belongs on a site called "Hacker News."

And no, it won't be opt-in for long. Read the rest of the page: "Once HTTPS becomes even more widely supported by websites than it is today, we expect it will be possible for web browsers to deprecate HTTP connections and require HTTPS for all websites. In summary, HTTPS-Only Mode is the future of web browsing!"

This is something you should be speaking up against.

Re: Firefox 83 introduces HTTPS-Only Mode

#8

Post by DixieDev » Tue, Nov 17, 2020, 9:45 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

As described in the article HTTPS-Only mode is opt in, you can also disable it at will, you can add exceptions on a site-by-site basis, and even when it's on you are prompted on whether or not you wish to proceed to non-HTTPS sites.

Re: Firefox 83 introduces HTTPS-Only Mode

#9

Post by everfree » Tue, Nov 17, 2020, 9:46 AM UTC

StreamBright wrote: post #2

What happens if i need to access localhost on http?

My guess is that either there's a built-in rule for that, or you can just click the "Continue to HTTP Site" button like in the screenshot.

Re: Firefox 83 introduces HTTPS-Only Mode

#10

Post by stanislavb » Tue, Nov 17, 2020, 9:47 AM UTC

...and I still still http-only sites from time to time.