1414753 - Change the HTTPS exception to temporary by default

Status: RESOLVED WONTFIX

(Firefox :: Security, enhancement)

Description

[Michal Stanke (Mozilla.cz) [:mstanke][:MikkCZ]]

This request we have got as a feedback during OpenAlt conference this weekend. At this moment when adding an exception for a certificate, it's checked to store the exception permanently by default. Personally I find this confusing too, as the users usually click everything they see without reading.

However the reported usecase was when testing pre-production web application, it's a pain to remove all the exception from time to time for new generated certificates and CA authorities. At least an option in about:config to uncheck the option by default would be helpful.

Comment 1

[Firefox Bug Husbandry Bot]

https://wiki.mozilla.org/Bug_Triage/Projects/Bug_Handling/Bug_Husbandry#Update_affecteds

Comment 2

[Johann Hofmann [:johannh]]

You can set security.certerrors.permanentOverride to false now.

Comment 3

[YF (Yang)]

(In reply to Johann Hofmann [:johannh] from comment #2)

You can set security.certerrors.permanentOverride to false now.

This is requested by bug 762985, not "by default" from this bug.

Comment 4

[Johann Hofmann [:johannh]]

Ok, fair enough, then this is a WONTFIX (because we won't do it), I was referring to

At least an option in about:config to uncheck the option by default would be helpful.