Giorgio Maone wrote:@Tom T.:
>did you try on a clean
profile?
Yes. No problem.
>Have you got any non-standard (
bold) network.* or security.* setting in
about:config?
network.cookie.cookieBehavior 1
network.cookie.enableForCurrentSessionOnly 1
network.cookie.lifetimePolicy 1
network.cookie.prefsMigrated
network.prefetch-next had been set to False. I changed it back to default True in an attempt to diagnose. No change in behavior.
(I'm familiar with about:config.)
security.OCSP.disable_button.managecrl False
security.OCSP.enabled 1
security.OCSP.signingCA = Builtin Object Token:Verisign Class 1 Public Primary Certification Authority
security.disable_button.openCertManager False
security.disable_button.openDeviceManager False
security.warn_entering_secure False
security.warn_leaving_secure False
security.warn_submit_insecure False
security.warn_viewing_mixed.show_once False
>Have you got ABE enabled (it's disabled by default on Gecko 1.8.x, since it can be problematic)?
Yes.
>If so, does disabling it help?
No. Abe was enabled in 1.9.5.73 with no problems at all, using default rules.
I should add that I had also previously tried deleting the extensions.* in Profile and letting new files be rebuilt. No effect.
I've narrowed the problem down to occurring *only* at Yahoo.com It doesn't happen anywhere else, including SSL-secure site (bank) or Hackademix, where I posted a comment a little while ago.
It doesn't happen when I go to the bookmarked (Classic) mail login page,
https://login.yahoo.com/config/login_verify2?&.src=ym.
Only after I enter my login, it is sent, and I am taken to my Inbox does this message appear. It persists at every page inside the Yahoo Mail (which is not secure once you are logged in.) Reading mail, Options, Contacts (address book), all produce this message, and all work fine after clicking OK twice on the error message. It also occurs on other pages in the Yahoo domain after logging out, e. g. finance.yahoo.com,
news.yahoo.com.
If I close the browser, which deletes all private data, and go back to, say, news.yahoo.com *without* logging in personally (with just "guest" cookies, presumably), the same thing happens.
Yahoo has been constantly "improving" things that weren't broken, thereby breaking them. I hope this narrows down the search. Thanks for your time.
Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US at an expert level; rv:1.8.1.20) Gecko/20081217 Firefox/2.0.0.20 diehard