Skip to main content

Mozilla wants to force the web to be more secure by holding features hostage

mozilla plans https only web mozzila mwc 2015
Its Firefox browser may no longer be as popular as it once was, but Mozilla still wants to make the web a better place, mostly by making it more secure.

While encrypted connections via HTTPS have been used in browsers for a very long time, they’re often not the default connection. Mozilla, along with a number of organizations and even the U.S. government, would like to see only HTTPS connections used. This wouldn’t magically make the Internet entirely secure, but it certainly wouldn’t hurt.

Mozilla outlined its plan to eventually move to only using secure connections in a blog post yesterday. Simply urging website owners to switch to HTTPS isn’t going to be enough to get every website to adopt secure connections, so Mozilla has another tactic in mind: holding new features hostage.

Mozilla plans to eventually only offer new browser features on sites using HTTPS connections. Firefox security lead Richard Barnes outlines the plan in two broad steps: “Setting a date after which all new features will be available only to secure websites,” and “gradually phasing out access to browser features for non-secure websites, especially features that pose risks to users’ security and privacy.”

The second element is the more interesting of the two, as it means that eventually features in Firefox will no longer be available to sites not using HTTP connections. Barnes even points out in the blog post that “removing features from the non-secure web will likely cause some sites to break.”

Fortunately, this doesn’t mean that your favorite old website will no longer be available. Mozilla plans to “monitor the degree of breakage and balance it with the security benefit.”

This is already happening, at least to some extent. Firefox currently limits the extent of camera and microphone access on non-secure websites, and Barnes points to this as a model for future feature limitations.

For a more technical take on the story for those so inclined, see the related post on the Mozilla blog.

Editors' Recommendations

Kris Wouk
Former Digital Trends Contributor
Kris Wouk is a tech writer, gadget reviewer, blogger, and whatever it's called when someone makes videos for the web. In his…
Microsoft is ‘handing even more of online life’ to Google, Mozilla CEO says
firefox chrome back end mozilla symbol hq headquarters building sign convention open source


Microsoft announced it would be rebuilding Edge on Windows 10 by using Google's Chromium engine, but not everyone is happy with the decision. In a recent blog post, Mozilla CEO Chris Beard writes that he believes the move is "handing even more of online life" to Google.

Read more
Mozilla’s built-in price-tracking extension makes it easy to shop with Firefox
firefox 55 adds webvr support

PriceWise tracks prices for you this holiday shopping season

With Black Friday and the Christmas shopping period fast approaching, it can be quite tricky to stay on top of the best deals when shopping on the internet. Mozilla has heard those worries and is now introducing a new set of experimental extensions that aim to make it easier to shop while browsing with Firefox.

Read more
Mozilla goes all-in on voice commands with its latest browser concept
firefox chrome back end mozilla symbol hq headquarters building sign convention open source

Mozilla, the maker of the Firefox web browser, is trialing a new browser concept called Scout. The new web navigation tool will have one intriguing feature over its flaming vulpine cousin: Voice support. The idea behind it is to make the entire browsing experience one that can be controlled and enjoyed through vocal commands alone.

With the growth of smart assistants like Siri, Cortana, and Google Now, alongside smart speakers like Amazon's Echo hardware, voice support is becoming increasingly common and is seen by many as the next step in human-technology interaction. Mozilla's Scout browser is an attempt to bring that level of hands-free interaction to the web browsing experience.

Read more