"Enabled the opt-in debugging feature to log SSL keys"

Users and developers helping users with generic and technical Pale Moon issues on all operating systems.
Please direct questions that are Mac or Linux-specific (dealing with installation and OS integration) to the appropriate Linux or Mac board.

Moderator: trava90

Forum rules
This board is for technical/general usage questions and troubleshooting for the Pale Moon browser only. The main focus here is on Pale Moon on Windows. Please direct your questions that are specific for Linux and Mac to the dedicated boards for those operating systems.
Technical issues and questions not related to the Pale Moon browser should be posted in other boards!
Please keep off-topic and general discussion out of this board, thank you!
Locked
John connor
Banned user
Banned user
Posts: 1492
Joined: 2015-01-21, 05:06

"Enabled the opt-in debugging feature to log SSL keys"

Post by John connor » 2017-08-24, 15:11

Wouldn't this be a security issue? If the browser can do it, a hacker can take advantage of it. Just like how stored passwords can be stolen. I never use the browser to store passwords and cookies are deleted on exit.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29243
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: "Enabled the opt-in debugging feature to log SSL keys"

Post by Moonchild » 2017-08-24, 15:22

This is only useful for debugging SSL conections.
It is also fully opt-in, so only the people who know they need it will ever enable it.

What set you off, seeing some keywords mentioned in a single statement? "SSL" "key logging"? :lol:
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

John connor
Banned user
Banned user
Posts: 1492
Joined: 2015-01-21, 05:06

Re: "Enabled the opt-in debugging feature to log SSL keys"

Post by John connor » 2017-08-25, 03:51

Moonchild wrote:.

What set you off, seeing some keywords mentioned in a single statement? "SSL" "key logging"? :lol:

No, I read the description and immediately thought that with an option like that a hacker might have the ability to read the SSL keys.

User avatar
Moonchild
Pale Moon guru
Pale Moon guru
Posts: 29243
Joined: 2011-08-28, 17:27
Location: Tranås, SE
Contact:

Re: "Enabled the opt-in debugging feature to log SSL keys"

Post by Moonchild » 2017-08-25, 08:15

Well if the "hacker" is the person sitting at your computer, then yes ;)
"Son, in life you do not fight battles because you expect to win, you fight them merely because they need to be fought." -- Snagglepuss
Image

Locked