New answers tagged

0

Firefox is a software product focussing on user privacy. Its user base is global. Who do you trust by default on a global scale? Everyone will have a different answer. The certificate authorities that you trust are a subset of the ones Mozilla trusts if you edit the list in Firefox, or likewise in your operating system's trust store. You can add a ...


0

Although the sites mentioned in the question are public-facing, these sites appear not to be intended for use by the general public. For example, https://web.mail.mil is likely a webmail portal for mail.mil. Notably, the DoD does use certificates issued by widely-trusted CA's on other sites that it runs, which are intended for public use. For example, ...


0

If you follow the common security rules and don't use passwords for more than one service/program then what should a website do with your Firefox master password? This password is only relevant if you have access to the Firefox password database on file-level, therefore for phishing this password it would require access to your file-system. And if someone ...


1

There is a strong difference between both ways. Never logging out is only possible under 2 conditions: you manage to keep the cookie in the browser client side - it may not be that easy because session cookies are normally non persistent ones the server never expires the session - which would be a true security error (1) or you maintain the session active ...


Top 50 recent answers are included