Hacker News Reader

Comment by crote | Hacker News Reader

Firefox Mobile 158.0 on Android 17 (Pixel 7) connects to all the demo sites with zero warnings. Any idea why the "automatic protection without updates" doesn't seem to be working with that combination?

View on HN

Pixel 10 with 158.0.1 still connects to the emSign ones, even though the patch notes for 158.0.1 mention that it updates the CRL for those without 'Remote Improvements' enabled?

edit: Disabling all the eMudhra CAs in Android settings does nothing, cool?

edit: I guess there's no way to manually ask for CRL update, cool??

edit: Gave up and reinstalled Firefox. Seems to be fine now.

I am getting the same on GrapheneOS on a P10.

I fully expected disabling them in the phone settings and rebooting would have fixed it, but no?

Don't really wanna reinstall FF and lose all my configruation.

Update: properly blocked now. Seems like it takes a few hours (days?) for the CRL update to propagate.

A fix is being released. Thanks for reporting! https://blog.mozilla.org/security/2026/10/20/protecting-fire...

I am seeing the same thing in the beta app (159.0b4) on an identical device. The sites are blocked correctly in Chrome.

I'm on the same Firefox version on android and they are blocked now

On my just updated Firefox 158.0.1 on Android they are not blocked.

Edit: however on Firefox Focus 157.0.1 they are blocked.

I'm having the same issue. It seems that their CRL updates aren't working well on Android?

Wiping local app storage fixes this.

Reply on news.ycombinator.com