> Implemented a subset of the Media Source Extensions (MSE) API to allow native HTML5 playback on YouTube<p>This is great! Actually just today I was wondering why Firefox was still using the Flash player for Youtube. Now it isn't anymore :)
Opportunistic encryption's really the big news. Will make the NSA's job harder.<p>Edit: Unfortunately, you <i>must</i> be using SPDY or HTTP/2 to use it. That's a real shame. I already had self-signed TLS and added the header, but then discovered it doesn't work with HTTP/1.1 (and with no good reason, either).
The new Security Panel on the Network Monitor display seems helpful.<p>Even better, it seems that Firefox has finally stopped erroneously reporting that some pages with multimedia content served properly over HTTPS were only partially encrypted. This had been a long-standing issue and the early comments from developers were not promising, so kudos and my personal thanks to whoever has fixed this one.
It's frankly ridiculous how you guys criticize Mozilla for all these things, when they are practically the only organization in the whole internet which continues to value privacy.
>Yandex set as default search provider for the Turkish locale<p>Interesting. Looks like Putin's relationship with Erdogan gets cozier all the time. Yandex has a very strong connection to Russian intelligence services:<p><a href="http://www.bbc.com/news/business-13274443" rel="nofollow">http://www.bbc.com/news/business-13274443</a>
So, Mozilla wants to change the ad industry, while preserving user privacy?<p><a href="https://careers.mozilla.org/en-US/position/oXqA0fwH" rel="nofollow">https://careers.mozilla.org/en-US/position/oXqA0fwH</a><p>I am extremely curious to find out what exactly do they have in mind here?
Don't forget to check the Firefox 37 for developers [0] page which has more detailed info (it's linked from the sidebar of the public release notes).<p>[0] <a href="https://developer.mozilla.org/en-US/Firefox/Releases/37" rel="nofollow">https://developer.mozilla.org/en-US/Firefox/Releases/37</a>
I understand that the Heartbeat user rating system can be disabled, but I'm still very much against it and think it will drive a lot of less technically-savvy users mad. I honestly thought it was an April Fools joke at first through reading it.
I just added Firefox 37 to Browserling. If you don't want to install it, you can try it live in your browser at this address:<p><pre><code> https://www.browserling.com/browse/firefox/37/news.ycombinator.com
</code></pre>
We've 3 servers handling demo sessions so you may have to wait in the queue to try it.
MSE on Youtube at last.<p>UPDATE: Strangely, media.mediasource.enabled still remained false for me in Firefox 37 (Linux). I had to manually set it to true, and it's highlighted, meaning that default is still false... Not sure how it fits with release notes then.
"display: contents" is an interesting addition. It appears to take an element out of the tree, replacing it entirely with its children.<p>Anyone have any thoughts on what that could be used for?
They disabled insecure TLS version fallback. Older versions of the Certicom TLS stack used in older versions of WebLogic are affected for example (change to JSSE).