Mozilla Firefox Browser Stable Version Releases

Firefox ESR 24.4.0:

http://www.mozilla.org/en-US/firefox/organizations/all/

 

Firefox 28 is also available now through the internal updater.

 

updated, thanks

this should be the official Mozilla Firefox update thread

-all upcoming updates would be here
-any new threads would be merged here

 

Version 29 beta was also released yesterday. This brings Australis with it. I assume that means it should be included with the 29 final when it releases in 6 weeks. Anyone else installed it? I'm not sure what I think of it. I don't consider it an improvement. Just change for the sake of it.

 

Understood. Probably not the correct thread for it but Betanews and Majorgeeks have had it since yesterday so I figured someone else had played with it.

 

Firefox 28 now supports OCSP via GET, but it is disabled by default. Anyone knows what advantages it has over POST specifically to OCSP?

It now also supports TLS False Start, enabled by default, controlled by the preference:
security.ssl.enable_false_start
More info: http://blog.cryptographyengineering.com/2012/04/so-long-false-start-we-hardly-knew-ya.html

Even though TLS 1.2 is supported since v27, AMO still doesn't support it, and also no Forward Secrecy
https://www.ssllabs.com:/ssltest/analyze.html?d=addons.mozilla.org
I created a bug about it earlier, please drop a vote and comment there:
https://bugzilla.mozilla.org/show_bug.cgi?id=961418

 

Found some info...https://bugzilla.mozilla.org/show_bug.cgi?id=436414

 

Note lack of Directory Tiles (aka) ads in newly opened tabs.

 

In Firefox ESR 24.4.0 the default settings for tls are:

security.tls.version.max [1]
security.tls.version.min [0]

Wouldn't it be better (more secure) to change max setting to 3 and min setting to 1?
SSL 3.0 being the lowest and TLS 1.2 being the highest defined.
Same settings would apply to Firefox 28 .

 

Yes, that is more secure.
BTW, Firefox has security.tls.version.max set to 3 since version 27.

Thanks

 

Thanks BoerenkoolMetWorst for verifying info & the correction.

 

Looks like Firefox Health Report & telemetry are more nosey (beware): FF28 complete list of changes

 

Right ON and thank you!!

 

Do this thread now supersede this - >
https://www.wilderssecurity.com/threads/mozilla-firefox-29-0-final.363243/

 

Updated

Thanks

 

@siljaline

See post 4

 

That something a Moderator | Forum Mod to decide what to merge mark as old, etc.
https://www.wilderssecurity.com/threads/new-firefox-browser-version-released.361562/#post-2352050

 

Everytime I install Firefox pages don't load/format right, and I get crashes. Regardless of the system, and how clean it is.

/sadface

 

See my attach - as it is not resolved although many are seeing speed improvements.
https://www.wilderssecurity.com/threads/new-firefox-browser-version-released.361562/#post-2380601

 

@ Firefox 30 hardeners: I made some notes during my pre-install look at FF30 release info. What has caught your eye? Are you aware of any points of interest that aren't reflected here? Thanks.

lockPref("beacon.enabled", false);

lockPref("browser.newtabpage.directory.source", "");
lockPref("browser.newtabpage.directory.reportClickEndPoint", "");

lockPref("experiments.enabled", false);
lockPref("experiments.manifest.uri", "");
lockPref("experiments.supported", false);

lockPref("geo.wifi.logging.enabled", false);

lockPref("loop.server", "");
lockPref("media.eme.enabled", false);
lockPref("services.push.serverURL", "");

lockPref("plugin.state.flash", 0)
lockPref("plugin.state.java", 0);
lockPref("plugin.state.npunity3d", 0);
lockPref("plugin.state.unity web player", 0);
lockPref("plugin.state.npciscowebcommunicator", 0);
lockPref("plugin.state.ciscowebcommunicator", 0);
lockPref("plugin.state.npmcafeemss", 0);
lockPref("plugin.state.npplayerplugin", 0);
lockPref("plugin.state.playerplugin", 0);
lockPref("plugin.state.npchip", 0);
lockPref("plugin.state.cisco jabber guest plug-in", 0);
lockPref("plugin.state.npesteid-firefox-plugin", 0);
lockPref("plugin.state.esteidfirefoxplugin", 0);
lockPref("plugin.state.npesteid-firefox-plugin", 0);
lockPref("plugin.state.npmozcouponprinter", 0);
lockPref("plugin.state.couponprinter-firefox_v", 0);
lockPref("plugin.state.npbispbrowser", 0);
lockPref("plugin.state.npgcplugin", 0);
lockPref("plugin.state.gcplugin", 0);
lockPref("plugin.state.npwebcard", 0);
lockPref("plugin.state.npatgpc", 0);
lockPref("plugin.state.webex", 0);
lockPref("plugin.state.npatgpc", 0);
lockPref("plugin.state.npskypewebplugin", 0);
lockPref("plugin.state.skypewebplugin", 0);
lockPref("plugin.state.npfacebookvideocalling", 0);
lockPref("plugin.state.facebookvideocalling", 0);
lockPref("plugin.state.npmeetingjoinpluginoc", 0);
lockPref("plugin.state.lwaplugin", 0);
lockPref("plugin.state.npvidyoweb", 0);
lockPref("plugin.state.vidyoweb", 0);
lockPref("plugin.state.npmvtplugin", 0);
lockPref("plugin.state.npviewright", 0);
lockPref("plugin.state.viewrightwebplayer", 0);
lockPref("plugin.state.npmcffplg", 0);
lockPref("plugin.state.f5 ssl vpn plugin", 0);
lockPref("plugin.state.f5 sam inspection host plugin", 0);

=============================================================
FHR now storing/submitting a persistent client identifier
https://bugzilla.mozilla.org/show_bug.cgi?id=968419

Navigator.sendBeacon
https://developer.mozilla.org/en-US/docs/Web/API/Navigator.sendBeacon
https://bugzilla.mozilla.org/show_bug.cgi?id=936340

Real-time communications service for Mozilla ecosystem
https://wiki.mozilla.org/Loop

Firefox Plugin whitelisting
https://wiki.mozilla.org/Plugins/Firefox_Whitelist

Google checks for downloaded files (FF30/FF31)
https://wiki.mozilla.org/Security/Features/Application_Reputation_Design_Doc
https://bugzilla.mozilla.org/show_bug.cgi?id=662819