User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4 Build Identifier: Mozilla/5.0 (Windows; U; Windows NT 5.0; en-US; rv:1.8.0.4) Gecko/20060508 Firefox/1.5.0.4 After an install of Firefox 1.5.0.4, there are now a big list of default trusted certificates that were previously deleted. The install assumes everyone wants those trusted certificates and there is no way to turn off the installation of them. Why should someone trust any of those default certificates? Can you at least put an option to NOT install all those default certificates rather than blanket installs of some huge list of "trusted" certificate sources? If I need them, I'll install later, at whatever site I'm at, that I trust. Reproducible: Always Steps to Reproduce: Go to TOOLS, OPTIONS, ADVANCED, select SECURITY tab, VIEW CERTIFICATES button, select AUTHORITIES, now go though and delete them all. Now install Firefox 1.5.0.4, and go back and repeat the steps just above. You can do this as many times as you like, the Firefox install will continue to install "default trusted certificates", a huge list of them that you just deleted. Actual Results: The deleted certificates appear again after the install of Firefox 1.5.0.4 Expected Results: I expect that certificates will remain deleted after I delete them and will install when I'm at a site that requires a certificate, a site that I trust. I want to be notified that a certificate is needed, not automatically trusted in some huge list of "default trusted certificates".

Not sure which component is re-adding them but it isn't the installer. Over to Firefox -> General for triage.

I found where they're being installed from: c:\program files\mozilla\NSSCKBI.DLL How the heck am I supposed to DELETE them if they're installed from a DLL? What's going on guys? The DELETE button is WORTHLESS if it's part of the DLL, isn't it? I guess I'll have to go look for the source code and compile it myself less all the NSSCKBI garbage.

Note that they continue to re-install after visiting a site that requests installing a certificate (I just saw this minutes ago). So it's not just installing the latest version of Firefox that does it, it auto-installs those certificates again and again, it's hard coded into the NSSBKCI.DLL and it doesn't delete those "trusted authorities".

see if bug 345934 matches your symptoms and mark this duplicate if so

according to bug 222139, it's bug 345934