News for hackers. Stuff that matters.
Re:Stopping FTP support in Firefox 90 by classichasclass on Tuesday July 20, 2021 @04:23PM (#27898814)
> You're saying it was normal (and is even today) to show HTML files over ftp links? I've never seen a browser do HTML over ftp

Firefox supported this completely until Fx61, when it disabled FTP subresources on HTTPS. Even then, you could still view HTML pages served over FTP until Fx70.

Re:Stopping FTP support in Firefox 90 by SahAssar on Tuesday July 20, 2021 @04:29PM (#27898881)
I might just be not lurking in the right corners of the internet, but is there a specific reason for serving HTML over FTP vs serving HTML over HTTP?

Not allowing FTP subresources on HTTPS is basically the same as not allowing HTTP subresources on HTTPS, that is just logical.

Re:Stopping FTP support in Firefox 90 by JackGreyhat on Tuesday July 20, 2021 @04:35PM (#27898934)
Not having to run a webserver? Some resources might be located on systems which do not support or allow it.
Re:Stopping FTP support in Firefox 90 by SahAssar on Tuesday July 20, 2021 @04:36PM (#27898959)
Is running a webserver different from running a ftp server? I've run both and never noticed much of a difference.
Re:Stopping FTP support in Firefox 90 by JackGreyhat on Tuesday July 20, 2021 @04:45PM (#27899067)
Well, I'm not saying running ftp to serve html is better. All I'm saying is that it can sometimes be the only supported option, or viable option. And there are major differences. Webserver access permissions vs. ftp server permissions for example?
Re:Stopping FTP support in Firefox 90 by SahAssar on Tuesday July 20, 2021 @04:51PM (#27899150)
> Webserver access permissions vs. ftp server permissions for example?

What I'm saying is: is there a meaningful difference? Both need to bind to a port that is privileged and read files from the served directory. There is no difference between a ftpserver and a webserver from a permissions/privilege perspective.

Re:Stopping FTP support in Firefox 90 by JackGreyhat on Tuesday July 20, 2021 @05:08PM (#27899358)
Well, that's right. There is no meaningful difference in the sense that they both have to serve files from a storage backend, over a port to a frontend. I was comparing ftp folder permissions with webserver htaccess permissions. What I really ment was access control.
Re:Stopping FTP support in Firefox 90 by SahAssar on Tuesday July 20, 2021 @05:21PM (#27899535)
Gotcha, but htaccess is specific to one server (apache). You can leave that out for basic things for basic use cases (just set read/write as you would for a normal unix user) and for more granular things you need to configure FTP just like you need HTTP.