Prevent overriding certificate errors

Supported on: Firefox 60 or later, Firefox 60 ESR or later

Registry

HKLM Software\Policies\Mozilla\Firefox\DisableSecurityBypass

HKCU Software\Policies\Mozilla\Firefox\DisableSecurityBypass

Value name: InvalidCertificate

Enabled: InvalidCertificate = 1

Disabled: InvalidCertificate = 0

Description

If this policy is enabled, the "Add Exception" button is not available when a certificate is invalid. This prevents the user from overriding the certificate error. If this policy is disabled or not configured, certificate errors can be overridden.