From 39fcc224e13fff689a026f60126317faa978f434 Mon Sep 17 00:00:00 2001
From: yokoffing <11689349+yokoffing@users.noreply.github.com>
Date: Fri, 10 Apr 2026 15:53:05 -0400
Subject: [PATCH] security.webauthn.always_allow_direct_attestation

---
 Securefox.js | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/Securefox.js b/Securefox.js
index 3aefc70..5d98d90 100644
--- a/Securefox.js
+++ b/Securefox.js
@@ -1108,6 +1108,10 @@ user_pref("editor.truncate_user_pastes", false);
 // [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1695693,1719301
 //user_pref("network.http.windows-sso.enabled", false); // DEFAULT
 
+// PREF: enforce no direct attestation in passkeys [FF144+]
+// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1981587 ***/
+//user_pref("security.webauthn.always_allow_direct_attestation", false); // [DEFAULT: false]
+
 /****************************************************************************
  * SECTION: ADDRESS + CREDIT CARD MANAGER                                   *
 ****************************************************************************/