v131 (#328)

Securefox.js

@@ -3,7 +3,7 @@
  * Securefox                                                                *
  * "Natura non contristatur"                                                *     
  * priority: provide sensible security and privacy                          *
- * version: 130                                                             *
+ * version: 131                                                             *
  * url: https://github.com/yokoffing/Betterfox                              *
  * credit: Most prefs are reproduced and adapted from the arkenfox project  *
  * credit urL: https://github.com/arkenfox/user.js                          *
@@ -24,7 +24,7 @@
 //user_pref("privacy.trackingprotection.enabled", true); // enabled with "Strict"
 //user_pref("privacy.trackingprotection.pbmode.enabled", true); // DEFAULT
 //user_pref("browser.contentblocking.customBlockList.preferences.ui.enabled", false); // DEFAULT
-user_pref("browser.contentblocking.category", "strict");
+user_pref("browser.contentblocking.category", "strict"); // [HIDDEN]
 //user_pref("privacy.trackingprotection.socialtracking.enabled", true); // enabled with "Strict"
     //user_pref("privacy.socialtracking.block_cookies.enabled", true); // DEFAULT
 //user_pref("privacy.trackingprotection.cryptomining.enabled", true); // DEFAULT
@@ -38,6 +38,8 @@ user_pref("browser.contentblocking.category", "strict");
     //user_pref("privacy.annotate_channels.strict_list.pbmode.enabled", true); // DEFAULT
 //user_pref("privacy.fingerprintingProtection", true); // [FF114+] [ETP FF119+] enabled with "Strict"
     //user_pref("privacy.fingerprintingProtection.pbmode", true); // DEFAULT
+//user_pref("privacy.bounceTrackingProtection.mode", 1); // [FF131+] [ETP FF133+]
+// [1] https://searchfox.org/mozilla-central/source/toolkit/components/antitracking/bouncetrackingprotection/nsIBounceTrackingProtection.idl#11-23
 
 // PREF: query stripping
 // Currently uses a small list [1]
@@ -143,14 +145,6 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.
 // [6] https://firefox-source-docs.mozilla.org/toolkit/components/antitracking/anti-tracking/cookie-purging/index.html
 //user_pref("privacy.purge_trackers.enabled", true); // DEFAULT
 
-// PREF: Bounce Tracking Protection [FF127+]
-// A new standardised variant of Cookie Purging that uses heuristics to detect bounce trackers,
-// rather than relying on tracker lists.
-// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1895222
-// [2] https://groups.google.com/a/mozilla.org/g/dev-platform/c/M6erM0SjPTM
-//user_pref("privacy.bounceTrackingProtection.enabled", true);
-//user_pref("privacy.bounceTrackingProtection.enableDryRunMode", false); // false enables tracker data purging
-
 // PREF: SameSite Cookies
 // Currently, the absence of the SameSite attribute implies that cookies will be
 // attached to any request for a given origin, no matter who initiated that request.
@@ -167,7 +161,7 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.
 // [8] https://developer.mozilla.org/en-US/docs/Web/HTTP/Cookies
 // [TEST] https://samesite-sandbox.glitch.me/
 //user_pref("network.cookie.sameSite.laxByDefault", true);
-user_pref("network.cookie.sameSite.noneRequiresSecure", true);
+//user_pref("network.cookie.sameSite.noneRequiresSecure", true); // [DEFAULT FF131+]
 //user_pref("network.cookie.sameSite.schemeful", true);
 
 // PREF: Hyperlink Auditing (click tracking)
@@ -351,6 +345,12 @@ user_pref("browser.xul.error_pages.expert_bad_cert", true);
 // [3] https://blog.cloudflare.com/tls-1-3-overview-and-q-and-a/
 user_pref("security.tls.enable_0rtt_data", false);
 
+// PREF: enable hybrid post-quantum key exchange
+// [1] https://pq.cloudflareresearch.com
+// [2] https://github.com/zen-browser/desktop/pull/2275
+//user_pref("security.tls.enable_kyber", true);
+//user_pref("network.http.http3.enable_kyber", true);
+
 /****************************************************************************
  * SECTION: FINGERPRINT PROTECTION (FPP)                                    *
 ****************************************************************************/
@@ -394,7 +394,7 @@ user_pref("security.tls.enable_0rtt_data", false);
  * SECTION: DISK AVOIDANCE                                                  *
 ****************************************************************************/
 
-// PREF: prevent media cache from writing to disk in Private Browsing
+// PREF: set media cache in Private Browsing to in-memory
 // [NOTE] MSE (Media Source Extensions) are already stored in-memory in PB
 user_pref("browser.privatebrowsing.forceMediaMemoryCache", true);
 
@@ -590,8 +590,8 @@ user_pref("browser.search.suggest.enabled", false);
 // PREF: disable Firefox Suggest
 // [1] https://github.com/arkenfox/user.js/issues/1257
 user_pref("browser.urlbar.quicksuggest.enabled", false); // controls whether the UI is shown
-user_pref("browser.urlbar.suggest.quicksuggest.sponsored", false); // [FF92+] 
-user_pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); // [FF95+]
+    //user_pref("browser.urlbar.suggest.quicksuggest.sponsored", false); // [FF92+] 
+    //user_pref("browser.urlbar.suggest.quicksuggest.nonsponsored", false); // [FF95+]
 // hide Firefox Suggest label in URL dropdown box
 user_pref("browser.urlbar.groupLabels.enabled", false);
 
@@ -1303,7 +1303,7 @@ user_pref("permissions.default.geo", 2);
 
 // PREF: remove special permissions for certain mozilla domains [FF35+]
 // default = resource://app/defaults/permissions
-//user_pref("permissions.manager.defaultsUrl", "");
+user_pref("permissions.manager.defaultsUrl", "");
 
 // PREF: remove webchannel whitelist
 user_pref("webchannel.allowObject.urlWhitelist", "");
@@ -1399,7 +1399,6 @@ user_pref("network.connectivity-service.enabled", false);
     //user_pref("toolkit.telemetry.dap_helper", ""); // [OPTIONAL HARDENING]
     //user_pref("toolkit.telemetry.dap_leader", ""); // [OPTIONAL HARDENING]
 
-
 // PREF: software that continually reports what default browser you are using [WINDOWS]
 // [WARNING] Breaks "Make Default..." button in Preferences to set Firefox as the default browser [2].
 // [1] https://techdows.com/2020/04/what-is-firefox-default-browser-agent-and-how-to-disable-it.html