diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 138b83d..5b87fac 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -183,7 +183,7 @@ user_pref("network.dns.skipTRR-when-parental-control-enabled", false); Block connections to servers that do not support RFC 5746, as they are potentially [vulnerable](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555) to man-in-the-middle attacks. -A server without [RFC 5746](https://datatracker.ietf.org/doc/html/rfc5746) can be safe from the attack if it disables renegotiations. However, the browser cannot know that. Setting this pref to `true` is the only way for the browser to ensure no unsafe renegotiations occur between the browser itself and the server. +A server without [RFC 5746](https://datatracker.ietf.org/doc/html/rfc5746) can be safe from the attack if it disables renegotiations. However, the browser cannot know that. Setting this pref to `true` is the only way to ensure no unsafe renegotiations occur between the browser and the server. :warning: Some sites, like `EA.com`, will not let you login due to their weak encryption.