Hacker News new | ask | show | jobs
by SandwichTeeth 2745 days ago
Firefox has some catches that make it not as easy to use in a work environment though and I honestly think will hurt their market share over time, mainly the fact that it doesn't use the OS cert store. This causes issues with most corporate web proxies that do SSL inspection since IT departments will push the proxy CA cert into OS cert stores through whatever endpoint management solution they have.

People can disagree all they want about SSL interception in a corporate environment (for good reason), but it's here to stay. When a corporate user downloads Firefox, tries to simply go to Google and gets a cert error page, they're just going to go back to Chrome because the process of exporting your company's CA cert and then importing it into Firefox so you can use the browser is just simply not feasible for most users.

1 comments

Interestingly enough, a previous customer only allowed for FF ESR and IE, while considering a security breach having anyone to try to install Chrome.
Interesting, is that just because of the privacy implications of using chrome?

My experience has been that most desktop IT teams don't have the resources to fine-tune browser configs on endpoints around things like corporate web filtering proxies so they just jam the cert in the OS store and call it a day. You can use Chrome, IE, or Firefox if you know how to get and import the cert (which most users do not). Sometimes users would submit tickets saying they wanted to use Firefox but couldn't get to any web pages, to which the IT team would reply "We don't support Firefox, use Chrome or IE" and that was that.