Hello,

I believe all versions of Java are now considered unsafe simply because in the past they have proved to be unsafe.

I think the rationale is: given the number of security vulnerabilities in previous versions of Java it is safer to assume that new versions will be vulnerable even if those vulnerabilities are not yet widely known.

See here for more information:

• https://blog.mozilla.org/security/2013/01/11/protecting-users-against-java-vulnerability/
• https://bugzilla.mozilla.org/show_bug.cgi?id=914690#c50

You can see the complete list of blocked add-ons here:

https://addons.mozilla.org/en-US/firefox/blocked/

I hope this helps.

Do we ask the Oracle Corporation to fix Java's issues? Or do we ask developers to stop using it?

I think Mozilla are hoping that developers will start to use HTML5 instead of Java (and indeed all browser plugins) because plugins are potentially vulnerable and also often cause crashes / other problems in the browser.

Here's an interesting article on the matter

http://threatpost.com/javas-losing-security-legacy

Thanks. It actually sounds even worse than I'd imagined.

Google Java security issues. There's a lot of concern about Java.

I do believe that Oracle is hammering its own nails into the Java coffin.

EG Apple has banned Java on it's Macs.

I have an interesting situation. All of my PCs are with FF24 and Java 7u45 installed WinXp sp3. Three PCs have Java set to "always ask" with the warning about safety.

One PC has Java plugin and Java Deployment Tookkit are set to "always activate" in the add-ons manager settings. The only options for both are "always activate" and "never activate".

How do I set this to the proper setting of "always ask"?

I've dug around in about:config but cannot see anything obvious.

I'm not too sure about that I'm afraid.

Since this is a slightly different question to the original would you mind starting a new thread and another support person will be along to answer.

Thanks.