From 3b18c671a803c11597a37f4ee1b9bcbac5acad65 Mon Sep 17 00:00:00 2001 From: yokoffing <11689349+yokoffing@users.noreply.github.com> Date: Wed, 11 Oct 2023 15:57:32 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 138b83d..5b87fac 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -183,7 +183,7 @@ user_pref("network.dns.skipTRR-when-parental-control-enabled", false); Block connections to servers that do not support RFC 5746, as they are potentially [vulnerable](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555) to man-in-the-middle attacks. -A server without [RFC 5746](https://datatracker.ietf.org/doc/html/rfc5746) can be safe from the attack if it disables renegotiations. However, the browser cannot know that. Setting this pref to `true` is the only way for the browser to ensure no unsafe renegotiations occur between the browser itself and the server. +A server without [RFC 5746](https://datatracker.ietf.org/doc/html/rfc5746) can be safe from the attack if it disables renegotiations. However, the browser cannot know that. Setting this pref to `true` is the only way to ensure no unsafe renegotiations occur between the browser and the server. :warning: Some sites, like `EA.com`, will not let you login due to their weak encryption.