Give Firefox Per-Site Secure Access Controls for Private and Sensitive Web Applications

[pankti21]

I think Firefox could benefit from more granular security controls for websites that require different levels of trust.

Today, browser security settings are generally applied at a broader level. But in real-world workflows, not every website has the same security requirements.

For example, I might use Firefox for public websites, internal company applications, development environments, banking, administration dashboards, and other sensitive services. It would be useful if Firefox allowed users to define different security and network rules for specific websites.

A possible Per-Site Secure Access feature could allow users to create rules such as:

• Always use a VPN for a specific website
• Require stronger authentication for sensitive sites
• Only allow access through a trusted network
• Block access when the required secure connection is unavailable
• Apply different DNS or network settings
• Require an approved device or security state
• Show a clear security indicator when special access rules are active

For example, a user could create a rule like:

internal.example.com → secure connection required

bank.example.com → VPN + strict privacy settings

development.example.com → trusted network only

This would give users more control without requiring them to manually change settings every time they visit a particular website.

I think this could also complement Firefox's existing VPN functionality. There are already discussions from users asking for more flexible per-site VPN controls, including the ability to choose which websites use the VPN.

I've been exploring these types of access-control workflows through QuickZTNA, where concepts such as Zero Trust Network Access (ZTNA), identity-based access, device posture, access policies, and secure private application access are particularly important.

The idea isn't for Firefox to become a complete Zero Trust Network Access platform. Instead, Firefox could provide better browser-level controls and APIs that allow users and organizations to define how sensitive websites should be accessed.

A simple security panel could show something like:

Connection: Secure
Identity: Verified
Network: Trusted
Device: Approved
Policy: Private application access enabled

This could be especially useful for remote workers, developers, IT teams, and organizations that rely on private web applications.

Would other Firefox users find per-site secure access controls useful?

[Jon]

Thanks for submitting an idea to the Mozilla Connect community! Your idea is now open to votes (aka kudos) and comments.