michel_ouba/FF_arkenfox_user.js
michel_ouba/FF_arkenfox_user.js
1
0
Fork 0
Code Releases Activity

add 1219 ref links

Browse Source
This commit is contained in:
Roman-Nopantski 2017-02-24 01:34:25 +13:00 committed by GitHub
parent 7b80d3c733
commit ffbbb43110
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
user.js
View File

@ -659,7 +659,8 @@ user_pref("security.mixed_content.block_active_content", true);
user_pref("security.mixed_content.send_hsts_priming", false);
user_pref("security.mixed_content.use_hsts", false);
// 1219: enforce HSTS preload list (default is true)
// recommended left at default, unless you fully understand the risks and trade-offs
// https://blog.mozilla.org/security/2012/11/01/preloading-hsts/
// https://wiki.mozilla.org/Privacy/Features/HSTS_Preload_List
user_pref("network.stricttransportsecurity.preloadlist", true);
// 1220: disable intermediate certificate caching (fingerprinting attack vector)
// NOTE: This may be better handled under FPI (ticket 1323644, part of Tor Uplift)