Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Èròjà atẹ̀lélànà yii ni a ti fi pamọ́ fọ́jọ́ pípẹ́. Jọ̀wọ́ béèrè ìbéèrè titun bí o bá nílò ìrànwọ́.

Feature Request: Set security.enterprise_roots.enabled to TRUE on default

  • 1 èsì
  • 1 ní ìṣòro yìí
  • 21 views
  • Èsì tí ó kẹ́hìn lọ́wọ́ Wesley Branton

contoso
contoso
more options

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

A lot of troubles with firefox installations at customer sites is because security.enterprise_roots.enabled is set to false by default. So where you think certificates are handled in company networks -> yes via group policies. So every vendors or internal certificates are handled there, and and all common browsers (chrome and IE, edge) got the certificate trust information from there. Except firefox. Its complicated to ensure security.enterprise_roots.enabled is set via scripts or deyployment settings. At least all others is "just install" How the user customizes his own browser is not my job as admin, but get it working to especially internal https secures sites is mine. I think others also may want this option set as default to true.

All Replies (1)

Wesley Branton
Wesley Branton
more options

It's not too difficult to change the default and lock this preference using the AutoConfig file.

We don't really handle feature requests on this forum. This is more of a technical support area. Your best bet would be to file a bug report and label it as an enhancement. You can also send your feedback to the developers and they will take a look.

Requests, such as changing the default of a preference, are not usually approved, but I'm sure that the developers can explain in greater detail why that preference is set to false by default.

Hope this helps.