diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 2dfc636..2c0b93b 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -118,10 +118,11 @@ user_pref("default-browser-agent.enabled", false); ### Require Safe Negotiation -Some sites, like `EA.com`, will not let you login due to their weak encryption. +:warning: Some sites, like `EA.com`, will not let you login due to their weak encryption. ``` // PREF: require safe SSL negotiation +// [ERROR] SSL_ERROR_UNSAFE_NEGOTIATION user_pref("security.ssl.require_safe_negotiation", true); ``` @@ -132,9 +133,9 @@ Do not send a [referer](https://developer.mozilla.org/en-US/docs/Web/HTTP/Header For subresources, the referer will only be sent to subdomains (e.g., `a.example.com` → `b.example.com`). -:warning: This will break Instagram embeds, Bing login, `MangaPill.com`, and some images/videos. :warning: +:warning: This will break Instagram embeds, Bing login, `MangaPill.com`, and some images/videos. -At the end of the day, most navigational "tracking" is harmless (i.e., the same for everyone) and effectively blocking cross-site referers just breaks a lot of sites. +Most navigational "tracking" is harmless (i.e., the same for everyone) and effectively blocking cross-site referers just breaks a lot of sites. ``` // PREF: do not to send a referrer when navigating to a different site