1
0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 07:30:47 +05:30

Updated Optional Hardening (markdown)

Hal
2024-05-24 14:26:00 -04:00
parent aacd985acf
commit 18fd5c6f60
+20 -20
@@ -103,10 +103,7 @@ user_pref("browser.cache.disk.enable", false);
[Public Key Pinning](https://wiki.mozilla.org/SecurityEngineering/Public_Key_Pinning) (PKP) is a tool that boosts the safety of [SSL certificates](https://www.cloudflare.com/learning/ssl/what-is-an-ssl-certificate/) by linking a website to its unique security key. This process ensures that the website you're visiting is real and not fake. PKP stops any attempts to trick your computer into connecting with a fraudulent website.
> [!WARNING]
> Sometimes antivirus software — or some other [source](https://github.com/yokoffing/Betterfox/issues/232#issuecomment-1732346856) — won't let you open websites ([example](https://www.reddit.com/r/firefox/comments/16mlv15/kaspersky_cant_scan_encrypted_connections_with/)).
> [!TIP]
> Reset it to `1` if you run into issues.
> Sometimes antivirus software — or some other [source](https://github.com/yokoffing/Betterfox/issues/232#issuecomment-1732346856) — won't let you open websites ([example](https://www.reddit.com/r/firefox/comments/16mlv15/kaspersky_cant_scan_encrypted_connections_with/)). Set it to `1` if you run into issues.
```javascript
// PREF: enforce certificate pinning
@@ -118,24 +115,12 @@ user_pref("security.cert_pinning.enforcement_level", 2);
### Sanitize on close
#### Allow exceptions
You can allow exceptions if you want to stay logged in to some sites.
* `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Manage Exceptions*
These settings automatically clear your browsing data, such as browser history, cookies, and cache, every time you close the browser. Clearing browsing data helps maintain privacy by ensuring that no information is stored on your device after you end your session.
> [!TIP]
> If you have [session restore](https://support.mozilla.org/en-US/kb/how-do-i-restore-my-tabs-last-time#w_restore-the-previous-session-every-time-you-open-firefox) enable, then you will need to use **Option 1** for session restore to work.
> [!NOTE]
> If you have [session restore](https://support.mozilla.org/en-US/kb/how-do-i-restore-my-tabs-last-time#w_restore-the-previous-session-every-time-you-open-firefox) enable, then you will need to use **Option 2** to restore previously opened tabs.
#### Option 1: Clear cookies and cache on shutdown
* `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Delete cookies and site data when Firefox is closed*
```javascript
// PREF: delete cookies, cache, and site data on shutdown
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
user_pref("privacy.clearOnShutdown.cache", true);
user_pref("privacy.clearOnShutdown.cookies", true);
user_pref("privacy.clearOnShutdown.offlineApps", true);
```
#### Option 2: Clear all browsing data on shutdown
#### Option 1: Clear all browsing data on shutdown
* `☰` *→ Settings → Privacy & Security → History → Clear history when Firefox closes*
```javascript
@@ -154,6 +139,21 @@ user_pref("privacy.clearOnShutdown.siteSettings", false);
user_pref("browser.sessionstore.privacy_level", 2);
```
#### Option 2: Clear only cookies and cache on shutdown
This option allows you to retain browser history and [restore previously opened tabs](https://support.mozilla.org/en-US/kb/how-do-i-restore-my-tabs-last-time#w_restore-the-previous-session-every-time-you-open-firefox) (optional).
* `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Delete cookies and site data when Firefox is closed*
```javascript
// PREF: delete cookies, cache, and site data on shutdown
user_pref("privacy.sanitize.sanitizeOnShutdown", true);
user_pref("privacy.clearOnShutdown.cache", true);
user_pref("privacy.clearOnShutdown.cookies", true);
user_pref("privacy.clearOnShutdown.offlineApps", true);
```
#### Allow exceptions
For either option, you can create exceptions to stay logged in to some sites.
* `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Manage Exceptions*
***
### Secure DNS