From 933cec09af6d480d4d7af2200d9c4414d11d9882 Mon Sep 17 00:00:00 2001 From: yokoffing <11689349+yokoffing@users.noreply.github.com> Date: Mon, 9 Oct 2023 19:24:03 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 17 +++++------------ 1 file changed, 5 insertions(+), 12 deletions(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 0c0e85b..21ed02c 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -28,21 +28,18 @@ user_pref("browser.firefox-view.feature-tour", "{\"screen\":\"\",\"complete\":tr *** ### Password management across devices +Disable saving passwords, credit cards, and addresses if you use a password manager. + :bulb: We recommend using [Bitwarden](https://addons.mozilla.org/en-US/firefox/addon/bitwarden-password-manager/) to manage your credentials on multiple devices. #### Logins & passwords -Disable saving passwords if you use a password manager. - * `☰` *→ Settings → Privacy & Security → Logins and Passwords → Ask to save logins and passwords for websites* - ```javascript // PREF: disable password manager user_pref("signon.rememberSignons", false); ``` #### Address & credit card -The same for credit cards and addresses. - * `☰` *→ Settings → Privacy & Security → Forms and Autofill* ```javascript // PREF: disable address and credit card manager @@ -63,16 +60,14 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", ""); *** ### HTTPS-Only Mode -We already: -* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages, including insecure downloads. -* [attempt](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) to upgrade HTTP site navigation to HTTPS. +We already [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages and [attempt to upgrade](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) HTTP site navigation to HTTPS. + +* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode* To add to your overrides, choose between two options below. #### Option 1: Private windows only Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)). - -* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in private windows only* ```javascript // PREF: enable HTTPS-Only Mode // Warn me before loading sites that don't support HTTPS @@ -83,8 +78,6 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); #### Option 2: All windows Firefox will get explicit permission from you before connecting to a site insecurely in Normal and Private Browsing. - -* `☰` *→ Settings → Privacy & Security → HTTPS-Only Mode → Enable HTTPS-Only Mode in all windows* ```javascript // PREF: enable HTTPS-Only Mode // Warn me before loading sites that don't support HTTPS