49fa87884f
Secure Oct 2022 ( #71 )
...
* "privacy.partition.serviceWorkers", true; // DEFAULT: true FF105+
* remove user_pref("gfx.font_rendering.opentype_svg.enabled", false);
* move Push API to SecureFox
* cleanup Passwords section
* move Formless Login Capture up
* Telemetry cleanup
* move FF sync
* add custom search engine
* Oblivious DoH
* privacy.resistFingerprinting explainer
* query stripping list
* cleanup Shutdown & Sanitize
* GSB cleanup
* enable lower network priority
* grammar
* [OVERRIDE] prefs
* password override
* GSB link
* comment out favicons
* comment out grouplabels
* deprecated under formautofill
* partion.bloburls currently experiencing regressions
* containers note
* additional notes for containers
* network predictor description rework draft
* spec con. draft
* font-visibility explainer
* add PROXY / SOCKS / IPv6
* network.predictor.enable-prefetch, false, not default [Nightly]
2022-09-30 14:23:29 -04:00
20551bb116
Secure Sept 2022 ( #62 )
2022-09-05 15:41:13 -04:00
0bbd0c7d52
Secure July 2022 ( #58 )
...
* thirdpartycookie session only slated for removal
* add back CRLite (not longer requires OCSP)
* prefetchfromHTTPS is default false
* comment out removing URLs
* Tweak santize on shutdown settings
* add category Shutdown & Santize
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* SANITIZE ON SHUTDOWN: cache
* grammar
* Update SecureFox.js
* security.pki.sha1_enforcement_level removed in FF 103
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* clarification for embed tests
* browser.urlbar.dnsResolveSingleWordsAfterSearch = 0 now default FF 104+
* CrLITE description update
* geo.provider.use_geoclue
* user_pref("browser.fixup.alternate.enabled", false); // [DEFAULT FF104+]
* Update SecureFox.js
* Fonts / WebRTC / Plugins
* grammar / sentence
* Enterprise Root Certificates
* Update SecureFox.js
* RSP
* uncomment font prefs
2022-08-13 19:33:35 -04:00
7408effb2a
Secure Feb 2022 ( #51 )
...
* URL for lowertrackingpriority
* cross-site, blobs
* update http test links
* OCSP info
* spelling
* mousedown spec connect
* browser.safebrowsing.downloads.remote.enabled is false by default
* Suggestion for HTTPS
* add Samesite
* https-only
* Update SecureFox.js
* Update SecureFox.js
2022-06-07 11:46:04 -04:00
b048d5d39e
SecureFox.js Jan 2022 ( #47 )
...
* change PREF to allow Reddit posts
* disable disk cache
* SSL
* Certs
* SSL / TLS and Region
* disable search engine updates
* disable social tracking (breaks Instagram posts)
* uncomment user_pref("toolkit.coverage.endpoint.base", ""); and user_pref("app.normandy.api_url", "");
* ETP forces Custom if socialtracking disabled
* "network.trr.send_user-agent_headers", false); now default
* referer policy
* SSL update
* security.ssl.require_safe_negotiation still breaks some pages
* comment out xOrigin
* comment out pbmode referer
* enable browser.sessionstore.privacy_level
* comment out require safe nego
* disallowCrossSiteRelaxing now default v. 97
* app.update.background.scheduling.enabled depreciated
* items to clear on shutdown
* SESSION RESTORE
* sanitize options
* favicon storing
* OCSP
* TP is default
2022-01-29 11:52:03 -05:00
9e4956c23e
Secure Nov 2021 ( #45 )
...
* Secure November 2021
* note SameSite schemeful as default
* comment out global mute toggle
* block_download_insecure now default
* correction
* Local Storage Next Generation now default
* third-party session only
* comment out Samesite
* grammar
* nonSecure cookie sesion only
* date change
* fission now default
* Update SecureFox.js
2021-12-16 10:56:28 -05:00
41d94c01d1
Secure Oct 2021 ( #41 )
...
* Secure Oct 2021
* note for TRR
* allow for reddit embeds
* Firefox Suggest
* HTTP alternative services
2021-10-30 14:58:43 -04:00
92808f77ee
Secure Sept 2021 ( #36 )
2021-09-06 20:07:25 -04:00
2ddd72f3e8
Secure Aug 2021c ( #33 )
...
* Secure Aug 2021c
* description to spec. connections
* prioritize speed in spec connections
* uncomment ECH
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* Update SecureFox.js
* messaging-system.rsexperimentloader.enabled
* Update SecureFox.js
* move URL bar suggestions to Pesky
* uBlock note
* Update SecureFox.js
* Update SecureFox.js
2021-08-08 12:56:24 -04:00
a47adfb9b6
Secure August 2021 ( #27 )
...
* Secure August 2021
* Mark defaults
Mark default prefs in SecureFox; remove defaults from user.js
* Update SecureFox.js
* correct appCache default status
* reorder ETP
* Network predictor active
* add note to PRELOADING
* Comment out prefs dealing with URL backends
user_pref("app.normandy.api_url", "");
user_pref("breakpad.reportURL", "");
user_pref("toolkit.coverage.endpoint.base", "");
* edit description network.http.speculative-parallel-limit
* added dash to https-first
2021-08-02 09:56:27 -04:00
10a0f1b5b8
SecureFox July 2021 ( #26 )
...
* Remove unused code + Flash plugin
Remove user_pref("dom.ipc.plugins.flash.subprocess.crashreporter.enabled", false);
Remove user_pref("plugin.state.flash", 0);
Remove user_pref("security.mixed_content.block_object_subrequest", true);
The prefs still exist but all the underlying NPAPI code has been removed: https://bugzilla.mozilla.org/show_bug.cgi?id=1682030
* unused code
* HTTPS First Mode
Firefox attempts to make all connections to websites secure, and falls back to insecure connections only when a website does not support it.
HTTPS-Only Mode needs to be disabled for HTTPS First to work.
* Cache
DEPRECATED / REMOVED
user_pref("browser.cache.offline.storage.enable", false);
* Background updates
* disable automatic authentication on Microsoft sites
user_pref("network.http.windows-sso.enabled", false);
2021-07-28 15:12:30 -04:00
7e6f084d6e
SecureFox May 2021 ( #22 )
2021-05-22 14:06:25 -04:00
369342a975
Secure March 2021 ( #14 )
...
* unflag contentblocking.customBlockList.preferences.ui.enabled
* network.http.speculative-parallel-limit to 0
* disable network:preload and network predictor
* add note to DoH
2021-03-28 12:03:41 -04:00
070237cf70
SecureFox updates Feb 2021 ( #7 )
...
* Missing "user_" in Telemetry section
Removed duplicates:
user_pref("toolkit.telemetry.unified", false);
user_pref("toolkit.telemetry.server", "");
* add note of breakage with password generator
* note default
* "Strict" tracking protection enables dFPI
* leave content blocking on Custom for now
* Strict = dFPI for all release channels
* remove cache_isolation (superseded by privacy.partition.network_state)
https://bugzilla.mozilla.org/show_bug.cgi?id=1687618
* TP hyperlinks
* comment out unused
* add urlbar.trimURLs
* Total Cookie Protection
2021-02-24 11:38:06 -05:00
8cd07238c4
Suggestions from gallegonovato ( #6 )
...
* additional prefs to GSB
* backend Mozilla telemetry
* optional: disable automatic exten. updates
2021-02-17 18:34:28 -05:00
835c31ef96
telemetry update (missing two prefs)
2021-02-15 21:33:00 -05:00
7eb8a5e83e
format
2021-02-12 16:10:24 -05:00
91f91b5008
07 Feb 2021
...
See user.js
2021-02-07 13:24:33 -05:00
01b8637769
07 Feb 2021
2021-02-07 12:51:56 -05:00
54cfa877d1
01 Feb 2021
...
* added ETP network priority explanation (see url)
* expanded Google Safe Browsing options
2021-02-01 16:43:44 -05:00
f7a0d5482c
29 Jan 2021
...
* Added prefs to allow Twitter's embedded tweets and Instagram's embedded posts on websites. Now we can keep Tracking Protection enabled in regular windows without breaking a lot of articles. Yay!!!
user_pref("urlclassifier.trackingSkipURLs", "*.twitter.com, *.twimg.com"); /* hidden */
user_pref("urlclassifier.features.socialtracking.skipURLs", "*.instagram.com, *.twitter.com, *.twimg.com"); /* hidden */
* Moved Address/Credit Card manager from Peskyfox to SecureFox.
Added
user_pref("breakpad.reportURL", "");
user_pref("browser.tabs.crashReporting.sendReport", false);
user_pref("browser.crashReports.unsubmittedCheck.enabled", false);
user_pref("browser.crashReports.unsubmittedCheck.autoSubmit2", false);
user_pref("default-browser-agent.enabled", false);
user_pref("extensions.postDownloadThirdPartyPrompt", false);
user_pref("security.insecure_connection_text.pbmode.enabled", true);
2021-01-29 16:19:15 -05:00
af30e3c55a
22 Jan 2021
...
- Commented out ECH due to breakage. (This is still experimental tech to replace ESNI.)
2021-01-22 13:00:32 -05:00
c7970d82f4
Update SecureFox.js
...
user_pref("dom.security.https_only_mode_send_http_background_request", false);
user_pref("privacy.window.name.update.enabled", true);
user_pref("dom.storage.next_gen", true);
user_pref("security.pki.crlite_mode", 2);
user_pref("security.remote_settings.crlite_filters.enabled", true);
2021-01-16 12:48:07 -05:00
1ff52b74bf
Encrypted Client Hello (ECH) added
...
ECH
// user_pref("network.dns.echconfig.enabled", true);
// user_pref("network.dns.use_https_rr_as_altsvc", true);
ESNI will be removed in later versions. See note. I generally don't keep Firefox ESR-only prefs.
MIXED CONTENT
user_pref("security.mixed_content.upgrade_display_content", true);
2021-01-09 12:24:28 -05:00
e809055523
added Network Partitioning
2020-12-19 13:33:33 -05:00
979f531ff5
added prefetching explanations
...
All "prefetch" preferences continue to be disabled here and in the user.js.
2020-12-18 12:35:10 -05:00
1f74cbd644
HTTPS only mode
2020-11-17 10:22:24 -05:00
2f5c01e918
Update SecureFox.js
2020-08-14 09:26:11 -04:00
7c7e874a1c
alter prefetch
2020-08-11 13:11:43 -04:00
d15ee69e5e
remove old ESR prefs
2020-08-11 11:53:15 -04:00
360fe26a87
add network.preload
2020-08-08 12:08:32 -04:00
8e4b1dcb29
FF 79 & 80 changes
2020-08-07 17:20:20 -04:00
5658874a0c
Update SecureFox.js
2020-07-30 10:56:45 -04:00
c01ea2b1c5
Add files via upload
2020-07-29 17:15:54 -04:00
535d992791
Changes to FF 77
...
- [SecureFox] The browser.urlbar.oneOffSearches preference has been removed. To hide one-off search buttons uncheck search engines on the about:preferences#search page.
+ [PeskyFox] Firefox will now recognize and open more PDF files in the browser.
+ [PeskyFox] Firefox will now prevent the page from truncating passwords that are too long.
2020-06-04 22:42:11 -04:00
a4d0a71031
FF 75 changes
2020-04-14 17:48:48 -04:00
42dfce8766
FF 75 privacy updates
2020-04-14 17:33:14 -04:00
a9b689f6bd
fixed mis-categorizations
2020-04-03 21:18:21 -04:00
09da0f8318
Update SecureFox.js
2020-03-24 16:15:03 -04:00
46f004ca01
Update SecureFox.js
2020-03-24 16:09:52 -04:00
08373afd31
Update SecureFox.js
2020-03-24 14:41:10 -04:00
202c371cc4
Update SecureFox.js
2020-03-24 14:18:58 -04:00
f708ae93cc
Update SecureFox.js
2020-03-24 14:10:46 -04:00
fb648652de
Update SecureFox.js
2020-03-24 13:24:32 -04:00
ecd05bc678
Update SecureFox.js
2020-03-24 13:12:51 -04:00
4adf5b7b30
Update SecureFox.js
2020-03-24 13:07:50 -04:00
606df8a956
Update SecureFox.js
2020-03-24 13:07:27 -04:00
19eb8742df
Update SecureFox.js
2020-03-24 13:06:22 -04:00
446a755f07
Update SecureFox.js
2020-03-24 13:05:25 -04:00
3d12cdb450
Update SecureFox.js
2020-03-24 12:02:41 -04:00
yokoffing