[Mozilla Enterprise] Streams Setting for Potentially Dangerous Files

Mike Kaply mkaply at mozilla.com
Wed Jan 6 20:45:45 UTC 2021


We check with Windows to identify the zone based on the URL and write it to
the Zone.identifier.

The concept of zones is at the Windows level, not just IE.

Mike





On Wed, Jan 6, 2021 at 12:58 PM Eddie Rowe <eddie.rowe at tdhca.state.tx.us>
wrote:

> On Windows 10 when I download a PDF from our web server, it does not have
> the streams configured to indicate the file was downloaded from the
> internet.  But when I download from a non-company web site the streams info
> is saved by Firefox.  So PDFs from our servers are not consider dangerous,
> but ones from other sites are considered such.  Except that webmail is
> dangerous…  How does Firefox know our domain name to cause this behavior?
> On IE there is the concept of zones, but I am not aware of Firefox having
> this setup.  I have reviewed the policies.json and the Mozilla.cfg and I do
> not see anywhere I have specified our domain for any special treatment,
> except for the pop-up blocker policy.
>
>
>
> Streams is how Adobe Acrobat/Reader decides if a PDF is dangerous – I may
> not be calling it the right thing, but based on the tool from Microsoft
> being called Streams I think it is.  When you view the properties of a file
> there will be an “Unblock” checkbox for any file you download from the
> internet.  Acrobat knows when a file is opened by Firefox and passed to
> Acrobat that the file is potentially dangerous.)
>
>
>
>
>
>
>
>
> _______________________________________________
> Enterprise mailing list
> Enterprise at mozilla.org
> https://mail.mozilla.org/listinfo/enterprise
>
> To unsubscribe from this list, please visit
> https://mail.mozilla.org/listinfo/enterprise or send an email to
> enterprise-request at mozilla.org with a subject of "unsubscribe"
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.mozilla.org/pipermail/enterprise/attachments/20210106/06bff6a3/attachment.html>


More information about the Enterprise mailing list