18 Jun 2008 10:40
Security within Firefox 3
Security takes front and centre in the new release of Firefox. For a look at the basic features, see our slide show. For a look inside the security features, see the following slides.
Blocked site
One of the most dramatic security changes within Firefox 3 is the blocked page. In Firefox 2, the browser screen would go dark and a window would open saying the page was suspected to be a forgery. No more. Firefox 3 blocks the entire page, unless you dare to ignore the warning and continue. Notice the red Border Guard icon in the upper left-hand corner (more on him later).
Community reporting
Firefox uses antiphishing information supplied by Google. Sometimes Google misses a page or blocks a page incorrectly. Firefox 3 makes it easy to send a note to either add a suspected forgery page or to report an incorrect forgery alert.
Verified pages
If a page isn't a forgery, how do you know whether the site you're visiting is using encryption or has been verified by a trusted third party? Firefox 3 makes it easy: just mouse over the company icon located to the left in the address bar. If you need further information, click on the company logo icon.
Validation: Bank of America
Clicking the icon, you see colour-coded 'Larry', Mozilla's new border guard. Here he's blue or cool. On sites that use Extended Verification Secure Sockets Layer (EV SSL), like eBay, both the company icon and Larry turn green to show that you're extra secure. If there was a problem with the site, you'd see Larry in either yellow or red.
Validation: CNET
If there's no encryption on the page or no trusted by VeriSign certificate, Larry turns gray. Sites like CNET and others that do not require encryption or third-party validation will not have the extra credentials.
Additional information
Should you want to make sure that you are on the CNET site, you can still request more information within Firefox 3 just by clicking the company icon.
Security warning
By default, Firefox 3 displays new warnings when entering and leaving encrypted web sites, but if you want to add even more warnings, you can check all the boxes.
Security warning 1
Here is the default warning we received after checking all the security messages boxes when we entered a financial site.
Security warning 2
And here is the warning we received when we left the financial site. Had we been working on a transaction and were suddenly without an encryption connection, Firefox would have warned us.
Story URL: http://reviews.zdnet.co.uk/software/productivity/0,1000001108,39436023,00.htm
Copyright © 1995-2009 CBS Interactive Limited. All rights reserved
ZDNET is a registered service mark of CBS Interactive Limited. ZDNET Logo is a service mark of CBS Interactive Limited.