Package: iceweasel Version: 42.0-1 Severity: important Some time ago, Chase Bank (https://www.chase.com/) started generating warnings about using an out-of-date browser, despite using a version of Iceweasel based on the latest upstream Firefox. As of recently, they now completely reject logins from a browser using the Iceweasel User-Agent. Changing the User-Agent to the corresponding Firefox User-Agent (dropping the Iceweasel/42.0 token) allows logging in.
Yes, this is a stupid thing for Chase to do. However, a quick check on Alexa confirms that Chase is the 116th most popular site on the web. Between this and the privacy concerns about browser fingerprinting (e.g. Panopticlick), versus the little-to-no value provided by including this token, is there any reason *not* to remove the Iceweasel token from the User-Agent string and match the upstream Firefox User-Agent? -- Addons package information ii gnome-shell 3.18.3-2 amd64 graphical shell for the GNOME des ii iceweasel 42.0-1 amd64 Web browser based on Firefox ii rhythmbox-plug 3.2.1-1 amd64 plugins for rhythmbox music playe ii xul-ext-adbloc 2.6.10+dfsg- all advertisement blocking extension ii xul-ext-https- 5.1.1-2 all extension to force the use of HTT ii xul-ext-itsall 1.9.2-1 all extension to edit textareas using -- System Information: Debian Release: stretch/sid APT prefers unstable APT policy: (500, 'unstable'), (1, 'experimental') Architecture: amd64 (x86_64) Kernel: Linux 4.3.0-trunk-amd64 (SMP w/4 CPU cores) Locale: LANG=C.UTF-8, LC_CTYPE=C.UTF-8 (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) Versions of packages iceweasel depends on: ii debianutils 4.5.1 ii fontconfig 2.11.0-6.3 ii libasound2 1.0.29-1 ii libatk1.0-0 2.18.0-1 ii libc6 2.21-3 ii libcairo2 1.14.4-1 ii libdbus-1-3 1.10.6-1 ii libdbus-glib-1-2 0.102-1 ii libevent-2.0-5 2.0.21-stable-2+b1 ii libffi6 3.2.1-3 ii libfontconfig1 2.11.0-6.3 ii libfreetype6 2.6.1-0.1 ii libgcc1 1:5.3.0-3 ii libgdk-pixbuf2.0-0 2.32.2-1 ii libglib2.0-0 2.46.2-1 ii libgtk2.0-0 2.24.28-1 ii libhunspell-1.3-0 1.3.3-3+b2 ii libnspr4 2:4.11-1 ii libnss3 2:3.21-1 ii libpango-1.0-0 1.38.1-1 ii libsqlite3-0 3.9.2-1 ii libstartup-notification0 0.12-4 ii libstdc++6 5.3.0-3 ii libvpx2 1.4.0-4 ii libx11-6 2:1.6.3-1 ii libxcomposite1 1:0.4.4-1 ii libxdamage1 1:1.1.4-2+b1 ii libxext6 2:1.3.3-1 ii libxfixes3 1:5.0.1-2+b2 ii libxrender1 1:0.9.9-2 ii libxt6 1:1.1.5-1 ii procps 2:3.3.10-4+b1 ii zlib1g 1:1.2.8.dfsg-2+b1 Versions of packages iceweasel recommends: ii gstreamer1.0-libav 1.6.1-1 ii gstreamer1.0-plugins-good 1.6.1-1 Versions of packages iceweasel suggests: pn fonts-lmodern <none> pn fonts-stix | otf-stix <none> ii libcanberra0 0.30-2.1 ii libgnomeui-0 2.24.5-3 ii libgssapi-krb5-2 1.13.2+dfsg-4 pn mozplugger <none> -- no debconf information

