Firefox-ontwikkelaars the plan to completely stop support for the FTP protocol, which will affect both the ability to upload files via FTP and to view the contents of directories on FTP servers. In the release of Firefox 77, scheduled for June 2, FTP support will be disabled by default, but in about:config there will be the setting 'network.ftp.enabled', allowing the restoration of FTP. In the ESR builds of Firefox 78, FTP support enabled. In 2021, the code associated with FTP will be completely removed.
The reason for abandoning FTP support is attributed to the insecurity of this protocol against modification and interception of transit traffic during MITM attacks. According to Firefox developers, there are no reasons in modern conditions to use FTP instead of HTTPS for resource downloads. Moreover, the FTP support code in Firefox is very old, creates problems during maintenance, and has a history of revealing a large number of vulnerabilities in the past. For those who require FTP support, it is suggested to use external applications that are attached as handlers for URL ftp://, similar to how irc:// or tg:// handlers are used.
It is worth noting that earlier in Firefox 61, downloading resources via the FTP protocol from pages opened via HTTP/HTTPS was already prohibited, and in Firefox 70, rendering the contents of files downloaded via FTP was discontinued (for instance, images, README, and HTML files stopped displaying when opened via FTP, and the file download dialog was immediately shown instead). Chrome is also planning to eliminate FTP — the process of gradually disabling FTP support by default (for a certain percentage of users) has begun, and in Chrome 82, complete removal of the code supporting the FTP client is planned. According to Google, FTP is almost no longer used — the share of FTP users is about 0.1%.
Bron: opennet.ru
