Live data from Hacker News

Stopping FTP support in Firefox 90

blog.mozilla.org

201–210 of 350 posts

Re: Stopping FTP support in Firefox 90

#201

Earlier quoted context omitted.

So your argument is that because you haven't used it lately, nobody does? Seems legit.

Yeah actually it is. I’m a pretty technical user and use the web and the internet a lot. I can’t think of a scenario where I would need FTP in 2021. Can you point me at one?

http://web.mit.edu/~linux/redhat/docs/MIRRORS.html

Re: Stopping FTP support in Firefox 90

#202
post #2

>If you are a Firefox user, you don’t have to do anything to benefit from this security advancement. The epitome of corporate speak: "we're taking away a feature of this software. You're welcome." I expect that kind of talk from Google; hearing it from Mozilla makes me a little sad.

This on the same line like " Our new CP and terrorism law is for your protection". I already feel much safer knowing that nobody can interfere with my downloads which will be supplied securely by Microsoft, Google and Cloudfare.

Re: Stopping FTP support in Firefox 90

#205

Earlier quoted context omitted.

So your argument is that because you haven't used it lately, nobody does? Seems legit.

Yeah actually it is. I’m a pretty technical user and use the web and the internet a lot. I can’t think of a scenario where I would need FTP in 2021. Can you point me at one?

[deleted]

Re: Stopping FTP support in Firefox 90

#206

Earlier quoted context omitted.

Surprising how many people don't know about ftps. FTP with SSL.

It's very obscure. Most things (mostly shared hosting lol) went straight to SSH's SFTP instead.

SFTP is mainly a *NIX thing. And it's a terrible hack built on top of a protocol meant to be something really different.

Also, while in theory SFTP can be as secure as FTPS, in practice it's not. How many people really check that the server public key signature it's the correct one? You know that annoying message that appears the first time you connect to a server and you have to say yes and if you don't it will not let you continue?

Not checking that give you the same security as having a HTTPS/FTPS server with a self signed certificate. You trust blindly the identity of the server, but there could be someone doing a man in the middle and stealing all your data. In that situation, FTPS is more secure, mainly because you need a valid TLS certificate that will give you some guarantee about the identity of the server.

Re: Stopping FTP support in Firefox 90

#207
post #91

Reminds me of Apple removing the headphone jack and being so proud of themselves for "being brave". Just yesterday I found a link to FTP while researching something. Was pretty annoying to go get another FTP client up and running to get it. Anyway, the movement away from unencrypted protocols to TLS-only is moving us closer to a fully censored internet. Sure, an unencrypted internet did not have any integrity guarant…

But Apple removed it to charge Mord for dedicated headphones. While Mozilla removes it to delete a Malware vector and/or save programming resources.

If Mozilla wants to remove a malware vector, it shall remove javascript.

Re: Stopping FTP support in Firefox 90

#209
post #129

Earlier quoted context omitted.

FTP has been related to web browsing since the beginning of the web 31 years ago. For maybe a decade (the first third of the web so far), most of the WWW was on FTP servers—not just most software downloads, but also most HTML pages. Web browsers are a much better interface to FTP servers than dedicated FTP clients, because you can click a link on an HTML page (either a statically generated directory, possibly on the…

Firefox didn't support directly opening and rendering HTML files via ftp:// URLs anyways, it'd just download them like a normal FTP client. I can't even remember the last browser I used that supported that. You can't kill what has been dead for decades already.

Actually, yes, it did, until Firefox 61 when FTP subresources were disallowed from HTTPS, and Firefox 70 when HTML pages over FTP were converted to downloads as well.
Post reply on HN