Mozilla is [1]urging Firefox users to update their browsers to version 128 or later (or ESR 115.13 for extended support users) before March 14, 2025, to avoid security risks and add-on disruptions caused by the expiration of a key root certificate. "On 14 March a [2]root certificate (the resource used to prove an add-on was approved by Mozilla) will expire, meaning Firefox users on versions older than 128 (or ESR 115) will not be able to use their add-ons," warns a [3]Mozilla blog post . "We want developers to be aware of this in case some of your users are on older versions of Firefox that may be impacted." BleepingComputer reports:

> A Mozilla [4]support document explains that failing to update Firefox could expose users to significant security risks and practical issues, which, according to Mozilla, include:

>

> - Malicious add-ons can compromise user data or privacy by bypassing security protections.

> - Untrusted certificates may allow users to visit fraudulent or insecure websites without warning.

> - Compromised password alerts may stop working, leaving users unaware of potential account breaches.

>

> It is noted that the problem impacts Firefox on all platforms, including Windows, Android, Linux, and macOS, except for iOS, where there's an independent root certificate management system. Mozilla says that users relying on older versions of Firefox may continue using their browsers after the expiration of the certificate if they accept the security risks, but the software's performance and functionality may be severely impacted.



[1] https://www.bleepingcomputer.com/news/software/mozilla-warns-users-to-update-firefox-before-certificate-expires/

[2] https://en.wikipedia.org/wiki/Root_certificate

[3] https://blog.mozilla.org/addons/2025/03/10/root-certificate-will-expire-on-14-march-users-need-to-update-firefox-to-prevent-add-on-breakage/

[4] http://support.mozilla.org/en-US/kb/root-certificate-expiration