ZDNet UK

• CNET NETWORKS UK BUSINESS SITES:
• atlarge.com
• BNET UK
• silicon.com
• SmartPlanet.com
• ZDNet.co.uk

Configure Firefox's settings to strengthen security

• Tags:
• Security,
• Mozilla,
• Firefox

Michael Mullins

Published: 16 Jun 2005 12:20 BST

• 
• 
• 
• 
• 

Web Features

• Block Popup Windows: I suggest selecting this check box -- it's a feature every browser should have.
• Allow Web Sites To Install Software: Go ahead and select this check box. When you allow a site to install software, Firefox will add it to the Allowed Sites list.
• Load Images: Select both this check box and the For The Originating Web Site Only check box. You can always go back and specifically allow or block individual sites.
• Enable Java: Select this check box.
• Enable JavaScript: Select this check box; clicking the Advanced button opens the Advanced JavaScript Options window.

Downloads

• Download Folder: I suggest creating a Downloads folder for storing all of your downloads. This makes it easier to scan your downloads once you're finished.
• Download Manager: I recommend selecting both check boxes: Show Download Manager Window When A Download Begins and Close The Download Manager When All Downloads Are Complete.
• File Types: I wouldn't allow any Microsoft product to perform any action automatically -- that's probably one of the reasons you're using the Firefox browser.

Advanced

• Accessibility, Browsing, and Tabbed Browsing: All three areas are functional and involve no security issues.
• Software Update: Select the Firefox check box, which allows the browser to update itself. I recommend not selecting the My Extensions And Themes check box to allow for updates.
• Security: To provide maximum cross-site functionality, I suggest selecting all three check boxes: Use SSL 2.0, Use SSL 3.0, and Use TLS 1.0.
• Certificates: Under Client Certificate Selection, select the Ask Every Time check box, which focuses user attention to the start of a secure session.
• Validation: Under OCSP (Online Certificate Status Protocol), select the Use OCSP To Validate Only Certificates That Specify An OCSP Service URL option.

Final thoughts
After running through all of these various Firefox settings, you might be wondering how to deal with security zones, browser helper objects (BHOs), and ActiveX. Don't worry: these are Microsoft inventions that support Microsoft products. As long as you use Firefox, they won't bother you anymore.

• 
• 
• 
• 

• Share this article:
• 
• 
• 
• 
• 

• Most Recent
• Most Popular
• Most Discussed