From 4fef00e7396bf01f53be361bb7f73e9a1420888c Mon Sep 17 00:00:00 2001 From: HJ <11689349+yokoffing@users.noreply.github.com> Date: Mon, 18 Sep 2023 22:16:46 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index d7df1af..fdf0dc6 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -61,7 +61,7 @@ user_pref("network.cookie.sameSite.schemeful", true); ### Secure DNS Setup and enforce DNS-over-HTTPS (DoH). -#### Provider +#### 1) Provider * Use the one below, or [choose](https://github.com/curl/curl/wiki/DNS-over-HTTPS) your preferred provider. * We recommend that you [create a profile](https://nextdns.io/?from=xujj63g5) with NextDNS and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config). ``` @@ -69,10 +69,10 @@ Setup and enforce DNS-over-HTTPS (DoH). user_pref("network.trr.uri", "https://dns.quad9.net/dns-query"); ``` -#### Mode -* Set to `2` if your work or university causes issues with alternative DNS. +#### 2) Mode * `3` has site-exceptions with a nice UI on the error page: * Go to `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Manage Exceptions* +* :warning: Set to `2` if your workplace or university causes issues with alternative DNS. ``` // PREF: enforce DNS-over-HTTPS (DoH) user_pref("network.trr.mode", 3); @@ -82,7 +82,7 @@ user_pref("network.dns.skipTRR-when-parental-control-enabled", false); *** ### Sanitize on close -#### Option 1: Clear all browsing data on shutdown except, except browser history +#### Option 1: Clear all browsing data on shutdown, except browser history * `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Delete cookies and site data when Firefox is closed* ``` // PREF: clear all browsing data on shutdown (except browser history)