Mozilla Firefox (en-US)

Name: Mozilla Firefox (en-US)
Author: Mozilla

by Mozilla · MPL-2.0

Mozilla Firefox is free and open source software, built by a community of thousands from all over the world.

Record

These URLs are the ones Mozilla declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

nullsoftmachine scopedownload-installer.cdn.mozilla.net · publisher-owned

nullsoftmachine scopedownload-installer.cdn.mozilla.net · publisher-owned

nullsoftmachine scopedownload-installer.cdn.mozilla.net · publisher-owned

Run this against the file on disk. If the output does not match the hash below, the file is not what Mozilla published. Delete it.

Windows · PowerShell

Get-FileHash "Firefox Setup 153.0.1.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Firefox Setup 153.0.1.exe"

Expected output

0b557b2983d63278be98daf7582fbb7050f93310f2a9381e804e0ba14fe2892e

Version on Homebrew: 153.0.1
Download URL: https://download-installer.cdn.mozilla.net/pub/firefox/releases/153.0.1/mac/en-US/Firefox%20153.0.1.dmg
SHA-256: e5a7f8f34b16ac5d8d429a1438468f023ad7bf9099fa928db537f45e32159f78
Install with Homebrew: brew install --cask firefox

Signal	Finding	Points
SHA-256 hash published	3 of 3 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	3 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	3 of 3 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	MPL-2.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Extensions Mozilla Firefox (en-US) registers itself to handle.

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/m/Mozilla/Firefox/153.0.1
macOS cask: formulae.brew.sh/cask/firefox