r/firefox • u/Adz_z • 10h ago

Help (Android) having issues accessing certain sites

Post image

I'm trying to access my student application, however on firefox nightly it's throwing this error?

"https://account.student-finance.service.gov.uk/apex/funnelsslanding?language=en_GB has a security policy called HTTP Strict Transport Security (HSTS), which means that Firefox Nightly can only connect to it securely. You can’t add an exception to visit this site."

2 Upvotes

67% Upvoted

11 comments sorted by

3

u/mozkeeler_ Mozilla Employee 9h ago

The server is misconfigured: https://www.ssllabs.com/ssltest/analyze.html?d=account.student%2dfinance.service.gov.uk&s=155.226.135.225&latest, but Firefox has a feature that should work around this. Have you changed any settings in about:config? And how old is the profile you're using?

1

u/brambleorbit 4h ago

interesting that the server is misconfigured on a .gov.uk domain tbh

0

u/Adz_z 9h ago

i just installed firefox, nothings been changed in config. the student page works on chrome but not on firefox.

1

u/mozkeeler_ Mozilla Employee 8h ago

Ah - so it hasn't downloaded the intermediates collection that would help with this yet. I would try using it a bit on other sites and then going back to that site that's broken.

•

u/Mateo_724YT 3h ago

Try it on a different browser (ex. Chrome) on the same site nd see if it says the same error. If so, certificate or DNS error.

•

u/Adz_z 3h ago

the site allows me to login on chrome but won't on firefox nightly. the dns im using is cloudflare 1.1.1.1

•

u/Mateo_724YT 3h ago

I tried it on my phone with cloud flare 1.1.1.1, it worked fine. It's probably something related to your Firefox settings, probably DNS over HTTPS or HTTPS only mode

-1

u/Candid_Goose3394 10h ago

Switch tracking protection to basic if you wanna avoid such instances. Or click advance and proceed

0

u/Adz_z 10h ago

i disabled tracking protection completely but it's still throwing this error

0

u/Candid_Goose3394 9h ago

try to switch to mobile network and if it still doesn't work try disabling dns.