Firefox 95 enhances the browser's protection against malicious code

Sammo

Level 7
Verified
Well-known
Jan 27, 2012
332
Firefox doesn't have encrypted SNI anymore. They use ECH: Encrypted Client Hello: the future of ESNI in Firefox – Mozilla Security Blog


Open the about:config settings in Firefox and try setting security.tls.version.max to 4 and security.tls.version.min to 3
Now Firefox only allows TLS v. 1.2 and 1.3
If the issue is actually related to your VPN then that's probably not the right solution.
I already did this and FF 95 still fails the Cloudflare test. I believe the issue is with Firefox and it's handling of DoH. If I deselect this option the TLS test passes.
 
Last edited:

HarborFront

Level 71
Thread author
Verified
Top Poster
Content Creator
Oct 9, 2016
6,014
I already did this and FF 95 still fails the Cloudflare test. I believe the issue is with Firefox and it's handling of DoH. If I deselect this option the TLS test passes.
Mine already pass the TLS 1.3 test at Cloudflare site.

1639022476464.png

If you are using uBO you need to allow some test sites to pass through

1639022526895.png

I did not enable DNS over HTTPS

1639022976036.png
 
Last edited by a moderator:

n8chavez

Level 16
Well-known
Feb 26, 2021
785
Ok. two things....One, I solved my issue! And, two, I am an idiot! It never occurred to me that I might need to update my userchrome.css file. But that's what was causing the issue.
 
  • Like
Reactions: oldschool and Kongo

Moonhorse

Level 37
Verified
Top Poster
Content Creator
Well-known
May 29, 2018
2,602
Yeah...that's not right. For me Firefox is incredibly light. What extensions are you using with it?
Just bitwarden, it got fixed after browsing & went back to normal

And ESNI is long gone, i guess its because of quic development
 
  • Like
Reactions: oldschool

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top