This article is more than 1 year old

Get the FTP outta here, says Firefox

Apparently someone still uses src to suck content into web pages from FTP servers

Mozilla developers have decided to block requests for File Transfer Protocol (FTP) subresources inside web pages.

A bug report and Intent to implement notice suggest the change will land in Firefox 61. The browser’s currently at version 59, with 61 due in May 2018.

The change will permit access to FTP resources in hyperlinks or when an FTP server’s address is entered into Firefox’s address bar, but the browser will no longer allow FTP resources to be summoned using the HTML src attribute.


FTP becoming Forgotten Transfer Protocol as Debian turns it off


Firefox will also block loads from FTP servers in iFrames.

Firefox developers have probably made the change for the same reasons Chrome’s coders offered when Google’s browser started labelling FTP sites as insecure last year, namely that FTP sends data as plaintext and just wasn’t designed for the modern web. Indeed, the protocol predated the web by more than 15 years.

Few will mourn or notice FTP’s deprecation inside Firefox and the protocol is now considered so marginal that even greybeard bastions like Linux download services have stopped offering it as an option.®

More about

More about

More about


Send us news

Other stories you might like