News for hackers. Stuff that matters.
Re:Stopping FTP support in Firefox 90 by acabal on Tuesday July 20, 2021 @02:28PM (#27897363)
Browsers opening an ftp:// link can simply prompt to open it in a different program, much like they did PDFs in the past. (I also don't think a browser should have to be a great PDF renderer, but here we are.)
Re:Stopping FTP support in Firefox 90 by tablespoon on Tuesday July 20, 2021 @02:47PM (#27897601)
> Browsers opening an ftp:// link can simply prompt to open it in a different program, much like they did PDFs in the past. (I also don't think a browser should have to be a great PDF renderer, but here we are.)

Except then you have to find, install, and configure that program, which not everybody may be able or willing to do. We have trust browsers, for better or worse, and many people may not be comfortable identifying another trustworthy program to handle FTP downloads (due to malware/adware concerns), especially when they're trying to do something else. Having something in the browser saves users a trust decision.

Also, this feature has been so established that lots of stuff was designed expecting it to work that will now be broken. I also wouldn't be surprised if some FTP sites (say with old drivers) just get taken offline without being migrated, due to this.

Re:Stopping FTP support in Firefox 90 by jacquesm on Tuesday July 20, 2021 @02:39PM (#27897500)
And such programs can and will be downloaded from disreputable sites packed with malware and other junk, because the user needs that file. The great thing of having this stuff concentrated in a single program is that at least you have only one vendor relationship to consider.
Re:Stopping FTP support in Firefox 90 by photon-torpedo on Tuesday July 20, 2021 @05:01PM (#27899271)
Users googling for an ftp client have a good chance to land on filezilla, a client that has a history of bundling with unwanted software.

The net security impact of dropping ftp support from the browser may well be negative.

Re:Stopping FTP support in Firefox 90 by alerighi on Tuesday July 20, 2021 @04:07PM (#27898604)
Not everyone has a FTP client installed in the system, or a FTP client that can be launched with the server to open (Windows explorer can open FTP servers but I don't think you could with a link. But I'm not sure).

A lot of sites, especially old ones, are build with the assumption that every browser can access FTP links as you would with HTTP. And so for example a download section is a link to a FTP server.

To me removing it is stupid. Is it a security concern? Not really. Also not having it in the browser will not make security better, a person that needs it will use it with another client. Will make the browser faster or smaller? Not really, a FTP client is something really simpler, and browser have them since ever.

Re:Stopping FTP support in Firefox 90 by dendriti on Tuesday July 20, 2021 @04:33PM (#27898918)
Who is this user, who needs an FTP client, but only sometimes, and doesn't know where to find one?
Re:Stopping FTP support in Firefox 90 by alerighi on Tuesday July 20, 2021 @07:38PM (#27900580)
Me. I don't want to install a FTP client for the 2 times at year that I go to a site to download something (typically drivers for some obsolete device) and the download is from an FTP server.

And yes, if I have the URL I can use curl to download the file from FTP, even if downloading it from the browser would be easier. But most of the times there is a link to the server directory, with multiple files to select. Yes I can use Windows explorer and connect to the FTP server and browse it, but to be fair, or just open Internet Explorer and past the FTP link.

Re:Stopping FTP support in Firefox 90 by beebeepka on Tuesday July 20, 2021 @02:34PM (#27897447)
Good thing the pdf reader in Firefox is just a is just a .is file