Sign in with
Sign up | Sign in

Mozilla: Firefox Now Deactivating Most Plug-Ins by Default

By - Source: Mozilla | B 11 comments

Mozilla is phasing out old plugin technology.

Not to be outdone by Google's report of blocking most plugins within Chrome starting January 2014, Mozilla updated its own blog reporting that Firefox will no longer activate most plugins by default, starting with the latest Aurora release.

On Tuesday, Mozilla's Benjamin Smedberg said that when a website tries to use a plugin, users can choose whether to enable it or keep it blocked. Ultimately, this should provide a better Firefox experience on a performance level, as plugins are known to be a source of hangs, crashes, and security incidents. Putting control in the hands of users should keep them more secure and the browser running more smoothly.

However, the one plugin that won't be blocked by default is Adobe Flash because it's used just about everywhere on the World Wide Web.

"Many websites use 'hidden' Flash instances that the user does not see and cannot click on; making Flash click-to-play would be confusing for most users," he said. "Users with older versions of Flash that are known to be insecure will see the click-to-activate UI and will be prompted to upgrade to the latest version. Our security and plugin teams work closely with Adobe to make sure that Firefox users are protected from instability or security issues in the Flash plugin."

Back in March, Mozilla conducted a user research survey on the prototype implementation of click-to-play plugins (pdf), and quickly discovered that many Firefox users actually had no idea what a plugin was. As Smedberg pointed out earlier in his blog, many plugins go unnoticed on web pages, so when participants suddenly had to enable these plugins on the same site repeatedly, they grew highly annoyed or confused. Mozilla decided to fix that.

"We redesigned the click-to-play feature to focus on enabling plugins per-site, rather than enabling individual plugin instances on the page," he said. "Advanced users who want to activate individual instances may still do so by installing a Firefox extension. We encourage people who want to try the new plugin experience to use the Mozilla Nightly or Aurora preview releases."

At one time, plugins were ideal for prototyping and implementing new features, but now that browsers have matured, these features can be tested within the browser environment thanks to WebGL, WebSockets, WebRTC and asm.js. Plugins have become legacy technology, they're a consistently growing security threat, and are not used on most mobile devices.

Mozilla is now encouraging website developers to ditch plugins if possible, and to hit the mozilla.dev.platform project list to request plugin features not available in the web platform.

Google said earlier this week that most plugins will be outright banned in Chrome starting January. As of Monday, the Chrome Web Store began rejecting new Apps and Extensions based on the Netscape-based plugin tech, and will delist current NPAPI-based Apps and Extensions in May 2014, followed by a complete removal in September 2014. Installed Apps and Extensions will continue to work until support for NPAPI is removed at the end of 2014.

Discuss
Display all 11 comments.
This thread is closed for comments
Top Comments
  • 10 Hide
    Usersname , September 28, 2013 5:25 AM
    I wish Internet Explorer would uninstall itself.
Other Comments
  • 3 Hide
    srap , September 28, 2013 4:15 AM
    Just two things:
    1: Only the last few versions of Flash will not be blocked, older and more insecure (Flash is never secure) versions will also need to be clicked.
    2: Plugins are less useful nowadays, but still not useless: DRM protected content cannot be distributed or served one the net with the alternatives.

    And here is a link for the aforementioned add-on: https://addons.mozilla.org/en-US/firefox/addon/click-to-play-per-element/
  • 10 Hide
    Usersname , September 28, 2013 5:25 AM
    I wish Internet Explorer would uninstall itself.
  • 2 Hide
    Usersname , September 28, 2013 5:27 AM
    Ha! That last post just earned me a Tom's "Night Owl" badge and it's the middle of the day here. Doesn't Tom's detect each users local time?
  • 5 Hide
    randomizer , September 28, 2013 6:07 AM
    This is a bit of an annoyance because I prefer a real PDF plugin to pdf.js, which is still too slow.
  • -3 Hide
    Pherule , September 28, 2013 6:55 AM
    Been using Flashblock and NoScript for a long time, so won't change anything for me. (Before you cry redundancy, NoScript misses some things, which is what Flashblock is for)
  • 5 Hide
    smeezekitty , September 28, 2013 9:41 AM
    There is nothing more annoying then when software thinks it knows best for the users.
    I don't agree with these tactics because plugins are still necessary for many types of media.

    Luckily it is probably possible to get around this crap with about:config
  • -3 Hide
    mrmike_49 , September 28, 2013 9:55 AM
    Flash is the plug-in that most needs to be disabled! It's been the cause of more problems than any other single program/app/plug-in
  • 3 Hide
    velocityg4 , September 28, 2013 1:25 PM
    Hopefully there will be an option to leave plugin's on by default. I have things customized the way I like them to be in Firefox. I don't want them to start messing everything up. The plugins I don't use or want have already been disabled. They also need to add an option to uninstall plugins you don't want rather than just disabling them.

    Though it would be much worse if they expanded this to add-ons.
  • 1 Hide
    rwinches , September 28, 2013 2:49 PM
    It's all about Ad Blocking.
  • 0 Hide
    hammer85 , September 28, 2013 8:34 PM
    This new flash policy of "enable-by-site" rather than by page SUCKS!
    Just imagine having 10 YouTube tabs open with each playing it's video.

    Thank God for the addon...
    https://addons.mozilla.org/en-US/firefox/addon/click-to-play-per-element/
  • 1 Hide
    smeezekitty , September 29, 2013 2:31 PM
    Quote:
    Quote:
    Flash is the plug-in that most needs to be disabled! It's been the cause of more problems than any other single program/app/plug-in


    Why? IE handles Flash just fine and always has. Flash isn't the issue, FF is just garbage and has been since v4.


    Flash with firefox doesn't give my any problems. Firefox did have a problem with crashing sometime between version 3.x - version 15 but they finally stomped that bug out.