redelijkheid.com

In the ‘old’ days, Safari was probably the only Internet browser with some decent color management. The problem was that images displayed in Firefox and Internet Explorer looked a bit desaturated and lighter.

Now, in FireFox 3 you have the opportunity of enabling color management. Just set the following configuration option to ‘true’ (by double clicking) in the FireFox configuration settings (to access the config-part of FireFox, just type about:config in the address bar).

gfx.color_management.enabled

This feature is turned off by default. Restart firefox and be amazed by the colors on your photos on the Internet

Most web browsers support the extended validation certificates. These certificates give a visual indication (green browserbar for example) that the SSL connection is trustworthy. The only problem is that they are expensive. Especially compared with the ‘ordinary’ SSL certificates.

These certificates are special because the Certificate Authority (e.g. VeriSign) validated the company who buys these certificates. This way, the end user can shop / bank / or whatever online without worrying too much.

Some affiliates / certificate vendors already did this years ago (validating the actual companies), so this is nothing new. Yet another way to fool the consumers, and make some extra money…..

The problem I run into is that I used to have a ‘yellow-ish’ addressbar when I entered an https website. Today (at least with FireFox 3) the address bar remains blank. The only indication is a tiny lock displayed at the bottom of the browser. Something you might (and definitely will) overlook.

I use a home made Certificate Authority to create my own certificates (for webmail, secure IMAP, SSL, etc.), but I would like to see a proper visual indication of the SSL connection. So, is there a way to create an EV-like certificate (or even a new CA) by using Microsoft Certificate Services or by using OpenSSL which displayes the colored addressbar?

I did find some info on the EV requirements, but these should be ’spoofable’ some way or another…..

UPDATE: I found a website which suggests reconfiguring Firefox 3. Problem with that is that I need to reconfigure all my browsers. I’d rather do it by ‘faking’ the specs.

It seems that the OCSP-responder is mandatory for the bars to turn green….

Like most security conscious people I use Firefox (FF) for my everyday browsing on the Internets. So when the Mozilla guys released version 3 I installed it on all my machines (2 Windows and 2 OSX platforms).

It was a bit getting used to. The underlying FF part had been changed. Bookmarks, history etc are all stored in sqlite databases. So no more flatfiles. This took me a couple of hours to figure it out, but finally I got ‘there’.

Using FF was business as usual… Apart from one very annoying bug; Opening new windows (not new tabs) results often in an empty bookmarks bar. And this is happening on Windows and OSX versions of FF.
The bookmarks are ‘there’ but not click-able. Using the right mouse button (on OSX: ctrl-mouse click) on the bookmarks bar and selecting ‘Open All in Tabs‘, FF opens every bookmark in the bar.

The only way of restoring the proper bar is the completely shutdown FF and restart it. After that it works for a certain amount of time.

The problem isn’t isolated to my environment. Just google on the issue, and you’ll find more people. There’s one suggestion I haven’t tried yet. Starting with a fresh/clean profile, but I do need my settings/passwords/bookmarks. I’m lost without those

UPDATE: I tried a new profile, and this seemed to work. After this I started to repopulate the new profile with the old settings, etc. Everything went fine until the point where I added the extensions. It seems that even old / not active extensions (SwitchProxy in my case) are still able to f*ck things up.

Firefox is the default browser on all my platform, and every once in a while I run into strange dialog boxes.
E.g., this evening I updated some digital certificates for the test environment of VeriSign MPKI backend. These certificates are issued by a (private) VeriSign CA. So there’s no trust by default.

After generating the keypair in FireFox 3 I got the positive dialog box as showed below.

No problem so far, but the next dialog box ’scared’ me a little;

This dialog box, or at least the result, would remove (or delete) the certificate I just generated. The issueing CA is not installed in FireFox (or on the machine itself for all it matters). But in fact the certificate was installed in the Crypto/Certificate store of FireFox, and I could use it to access the VeriSign test backend.

So, eventhough, FireFox warns the user that the content will be deleted (or not added), it doesn’t exactly does that at all. Let’s see if I can file a bug report, because this occured on all 4 certificates I generated/imported.

Mozilla released Firefox 3 during my holiday. So the first thing I had to do was upgrade v2.x to the latest version. Initially everything seemed fine…. INITIALLY…

The trouble began when I tried to add bookmarks. The new bookmark interface (it’s called Library) showed up empty. When I tried to add a bookmark, it was impossible to remove it.

“Why would you want to remove a bookmark??” Well, because every bookmark I added ended up with the URL to some ad. At first I thought I had some weird virus or trojan on my Mac. But it seemed that every Mac had the same problem.

E.g. If I added the SnipURL button to my toolbar (which is basically a javascript) it would work, but when I pressed the button, it would show a Google ad. There was also no way of removing or changing it.

Today I started digging into the /Users/<username>/Library/Application Support/Firefox/ folder. This was the place where all settings were stored. After fooling around with importing the old bookmarks.html file I ended up with 3 times the amount of bookmarks and no way of deleting them.

It seemed that Firefox 3 uses a SQL-like database called ‘places.sqlite‘. This database imports the old bookmarks.html file upon the first launch. Possibly, that html file was corrupt (or what ever), because when I removed all bookmarking files (I did make a backup of the old bookmarks.html file!!!!) and relaunched Firefox 3, the bookmarking interface worked correctly. Now I imported the ‘old’ bookmarks.html file, and everything was back to normal (so far).

For those interested; I removed the following files under the /Users/<username>/Library/Application Support/Firefox/ directory;

• Everything with bookmark in it’s name (make sure to backup the ‘original’ bookmarks.html). This includes backups etc.
• places.sqlite

After starting Firefox 3, you may want to import and (re)organize the old bookmarks.

Note that this scenario occured while upgrading from the latest Firefox 2 version to 3 on an Intel Mac. Other scenario’s might show similar ‘bugs’, but are not tested in any way.

Apart from this ‘minor’ issue, I’m very happy with the new browser. Speedy, less memory consumption, etc.

Now I need to figure out if bookmark-syncing is available in FF3.

A friend suggested the Opera Mini browser (v4 beta2) as a browser on my Nokia E61i. So I downloaded it and installed it. Great looking browser which renders some sites much better than the normal included browser (and it’s still absolutely free!!).
My online banking site seems to work a bit better anyway.

One thing I haven’t figured out is how to set the Opera Mini browser as the default browser. If I open a link in an e-mail it opens the original browser….

I received an error today when I tried to access a SSL protected website. According to FireFox;

Firefox can’t connect securely to because the site uses a security protocol which isn’t enabled.

It seems that FireFox has removed the support for older/insecure SSL sessions. Some research showed that these setting are accessible through the ‘hidden’ configuration in FireFox. Just type about:config in your addressbar and it shows the advanced settings of FireFox.

Put security.ssl3.rsa_rc4_40_md5 in the filter bar, so that all other settings are removed from the current view. After that set the parameter to true (default is false).

After this you’re able to access the website. If not try enabling the other encryption parameter to true (which are set to false). Filter on security, and the parameter are quite similar to the one discussed in this entry.

Note that there might be some security issues when you enable old(er) security protocol support in FireFox. These are disabled for a reason!!!.

A couple of days ago, I upgraded Internet Explorer on the laptop from my work. Initially, everything seemed fine… Until I wanted to access our web-based HR system (PeopleSoft).

In the good-old-days, this website worked (not good, and not bad). Since IE7, the login page remains blank, while the sourcecode of the page is fully loaded. So no way of logging to my personal HR page. I have no idea what’s causing this (PeopleSoft or IE7). I do know that the (simple) login page holds a gazillion lines of Javascript…. Why? It’s just a login page.

A temporary work-around is using FireFox 2.0. Version 2.0 seemed to have solved some of the bugs I got with FireFox 1.5.x in PeopleSoft. Problem is that I need to change proxy settings for FireFox. I use IE for intranet browsing, because the developpers are MS-fans, and FireFox for global Internet browsing.
Mind you that you have to disable the NoScript extension for FireFox (when installed). Just allowing all scripts for the PeopleSoft website gives erratic behavior, and lot’s of errors on the pages. Only disabling the extension seems to work (which requires a reboot ).
Anyway, somebody has to do some work to improve things.

Microsoft has released their latest Internet Browser, and the new features are phenomenal.

LOL

In the older FireFox versions (<2.0), it was possible to allow cookies from sites you visit, but to disallow cookies which do not originate from that site (e.g. advertisements etc.). These cookies makes it possible for the advertising sites to track your movements on the Internet (amongst other things).

Somehow, the FireFox developers removed that functionality from the user interface, and it seems to be disabled by default. It can be enabled by using the about:config command (just type it in the URL bar in FF).
This opens the registry/configuration of FireFox.

Search the config for network.cookie.cookieBehavior (you can search by using the filter), and set the value to “1″ (without the quotes).

I noticed today that Internet Explorer v7 showed up as a critical download (according to Microsoft). Since I like to experiment (I know… it’s wrong), I decided to give it a try. What can happen? I use Firefox as the default browser.

I played with IE7 in Vista RC2, and seemed (!!!!!) to work fine. After installing it, I might have lost all my bookmarks, or perhaps I didn’t have any to start with in IE6 . Anyway, that’s something to remember when I upgrade IE on my laptop from work.
Here are some annoyances I ran into:

• Clearview
  Lame ass anti-aliasing. I thought I had some sort of eye-disorder. (can eventually be switched of in the advanced options, and it needs a restart of the browser).
• Anti-phising
  More pop-ups asking stupid questions… Somehow it wanted to check my own website against a phishing list…. disabled it immediately.
• Flickr bagde
  Can’t get it to work in IE7. Not even if I remove all security restrictions. So if you don’t see any pictures in my flickr badge, it means you’re using a fucked-up browser.
  Solved: I needed to install the Flash player component AGAIN especially for IE7 (/me wonders why IE7 doesn’t mention that it doesn’t have the necessary components to view the page correctly)
• Menu bar
  Is disabled by default, and if you enable it, it’s not at the top of your window (???)
• ….

Strangely enough, WordPress seems to work fine, since I’m using IE7 to write this post. (correction: when I wanted to submit this post, there was an error on page according to IE7….)

Well, back to good-old Firefox 2.0, and leave all the IE7 annoyances behind me :D.

Conclusion: Microsoft created a great (visual) copy of Firefox. Too bad that they had the urge to add bugs and annoyances to it. I can hardly wait for Vista and the new Office suite