{"id":2777,"date":"2021-07-20T00:45:12","date_gmt":"2021-07-20T07:45:12","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/?p=2777"},"modified":"2021-07-20T00:45:50","modified_gmt":"2021-07-20T07:45:50","slug":"stopping-ftp-support-in-firefox-90","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/","title":{"rendered":"Stopping FTP support in Firefox 90"},"content":{"rendered":"

 <\/p>\n

The File Transfer Protocol (FTP) has long been a convenient file exchange mechanism between computers on a network. While this standard protocol has been supported in all major browsers almost since its inception, it\u2019s by now one of the oldest protocols still in use and suffers from a number of serious security issues.<\/p>\n

The biggest security risk is that FTP transfers data in cleartext, allowing attackers to steal, spoof and even modify the data transmitted. To date, many malware distribution campaigns launch their attacks by compromising FTP servers and downloading malware on an end user\u2019s device using the FTP protocol.<\/p>\n

 <\/p>\n

\"Discontinuing<\/a>Aligning with our intent to deprecate non-secure HTTP<\/a> and increase the percentage of secure connections, we, as well as other major web browsers, decided to discontinue support of the FTP protocol.<\/p>\n

Removing FTP brings us closer to a fully-secure web which is on a path to becoming HTTPS only and any modern automated upgrading mechanisms such as HSTS<\/a> or also Firefox\u2019s HTTPS-Only Mode<\/a>, which automatically upgrade any connection to become secure and encrypted do not apply to FTP.<\/p>\n

The FTP protocol itself has been disabled by default since version 88<\/a> and now the time has come to end an era and discontinue the support for this outdated and insecure protocol — Firefox 90 will no longer support the FTP protocol.<\/p>\n

If you are a Firefox user, you don\u2019t have to do anything to benefit from this security advancement. As soon as your Firefox auto-updates to version 90, any attempt to launch an attack relying on the insecure FTP protocol will be rendered useless, because Firefox does not support FTP anymore. If you aren\u2019t a Firefox user yet, you can download the latest version here<\/a> to start benefiting from all the ways that Firefox works to protect you when browsing the web.<\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

  The File Transfer Protocol (FTP) has long been a convenient file exchange mechanism between computers on a network. While this standard protocol has been supported in all major browsers … Read more<\/a><\/p>\n","protected":false},"author":960,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[30,69],"tags":[],"coauthors":[280776,466092,466093],"yoast_head":"\nStopping FTP support in Firefox 90 - Mozilla Security Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Christoph Kerschbaumer, Dragana Damjanovic, Valentin Gosu\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/\",\"name\":\"Stopping FTP support in Firefox 90 - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-600x319.jpg\",\"datePublished\":\"2021-07-20T07:45:12+00:00\",\"dateModified\":\"2021-07-20T07:45:50+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/2aa58e904cdee9bfd7aef6290ccfba5b\"},\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage\",\"url\":\"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-scaled.jpg\",\"contentUrl\":\"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-scaled.jpg\",\"width\":2560,\"height\":1363,\"caption\":\"Discontinuing FTP support in Firefox 90.\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Stopping FTP support in Firefox 90\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/2aa58e904cdee9bfd7aef6290ccfba5b\",\"name\":\"Christoph Kerschbaumer\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/c2f32f82e57d2d276655d533c069c73d\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/34c427186fcdd42f4c9c57a8bd0bcd7b?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/34c427186fcdd42f4c9c57a8bd0bcd7b?s=96&d=identicon&r=g\",\"caption\":\"Christoph Kerschbaumer\"},\"description\":\"Manager, Security Engineering\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Stopping FTP support in Firefox 90 - Mozilla Security Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/","twitter_misc":{"Written by":"Christoph Kerschbaumer, Dragana Damjanovic, Valentin Gosu","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/","url":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/","name":"Stopping FTP support in Firefox 90 - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"primaryImageOfPage":{"@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage"},"image":{"@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage"},"thumbnailUrl":"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-600x319.jpg","datePublished":"2021-07-20T07:45:12+00:00","dateModified":"2021-07-20T07:45:50+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/2aa58e904cdee9bfd7aef6290ccfba5b"},"breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#primaryimage","url":"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-scaled.jpg","contentUrl":"https:\/\/blog.mozilla.org\/security\/files\/2021\/07\/stop_ftp-scaled.jpg","width":2560,"height":1363,"caption":"Discontinuing FTP support in Firefox 90."},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2021\/07\/20\/stopping-ftp-support-in-firefox-90\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Stopping FTP support in Firefox 90"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/2aa58e904cdee9bfd7aef6290ccfba5b","name":"Christoph Kerschbaumer","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/c2f32f82e57d2d276655d533c069c73d","url":"https:\/\/secure.gravatar.com\/avatar\/34c427186fcdd42f4c9c57a8bd0bcd7b?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/34c427186fcdd42f4c9c57a8bd0bcd7b?s=96&d=identicon&r=g","caption":"Christoph Kerschbaumer"},"description":"Manager, Security Engineering"}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2777"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/960"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2777"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2777\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=2777"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=2777"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=2777"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=2777"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}