michel_ouba/FF_arkenfox_user.js
michel_ouba/FF_arkenfox_user.js
1
0
Fork 0
Code Releases Activity

minor edits

Browse Source
This commit is contained in:
Roman-Nopantski 2017-02-23 05:53:57 +13:00 committed by GitHub
parent 3af7679932
commit d17fa573a9
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
user.js
View File

@ -610,7 +610,7 @@ user_pref("security.cert_pinning.enforcement_level", 2);
// user_pref("security.tls.version.min", 2); // user_pref("security.tls.version.min", 2);
// user_pref("security.tls.version.fallback-limit", 3); // user_pref("security.tls.version.fallback-limit", 3);
// user_pref("security.tls.version.max", 4); // allow up to and including TLS 1.3 // user_pref("security.tls.version.max", 4); // allow up to and including TLS 1.3
// 1210: disable 1024-DH Encryption // 1210: disable DHE (Diffie-Hellman Key Exchange)
// https://www.eff.org/deeplinks/2015/10/how-to-protect-yourself-from-nsa-attacks-1024-bit-DH // https://www.eff.org/deeplinks/2015/10/how-to-protect-yourself-from-nsa-attacks-1024-bit-DH
// WARNING: may break obscure sites, but not major sites, which should support ECDH over DHE // WARNING: may break obscure sites, but not major sites, which should support ECDH over DHE
user_pref("security.ssl3.dhe_rsa_aes_128_sha", false); user_pref("security.ssl3.dhe_rsa_aes_128_sha", false);
@ -663,8 +663,8 @@ user_pref("security.mixed_content.use_hsts", false);
// user_pref("network.stricttransportsecurity.preloadlist", false); // user_pref("network.stricttransportsecurity.preloadlist", false);
// 1220: disable intermediate certificate caching (fingerprinting attack vector) // 1220: disable intermediate certificate caching (fingerprinting attack vector)
// NOTE: This may be better handled under FPI (ticket 1323644, part of Tor Uplift) // NOTE: This may be better handled under FPI (ticket 1323644, part of Tor Uplift)
// WARNING: This affects login/cert/key dbs You will lose all credentials as they are now // WARNING: This affects login/cert/key dbs. The effect is all credentials are session-only.
// session-only. To be clear, you will lose all your saved passwords and login user names // Saved logins and passwords are not available. Reset the pref and restart to return them.
// https://bugzilla.mozilla.org/show_bug.cgi?id=1334485 // related bug // https://bugzilla.mozilla.org/show_bug.cgi?id=1334485 // related bug
// https://bugzilla.mozilla.org/show_bug.cgi?id=1216882 // related bug (see comment 9) // https://bugzilla.mozilla.org/show_bug.cgi?id=1216882 // related bug (see comment 9)
// user_pref("security.nocertdb", true); // (hidden pref) // user_pref("security.nocertdb", true); // (hidden pref)