mirror of
https://github.com/yokoffing/Betterfox.git
synced 2026-06-12 07:30:47 +05:30
Updated Optional Hardening (markdown)
+40
-40
@@ -84,6 +84,46 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
|
||||
|
||||
***
|
||||
|
||||
### Secure DNS
|
||||
Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-dns-over-https) (DoH).
|
||||
|
||||
#### DoH Provider
|
||||
Use the DoH address below to protect against security threats, ads, and trackers. It uses [DNSwarden](https://dnswarden.com/) with Hagezi's [Light](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#light) list and [threat intelligence feeds](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif).
|
||||
|
||||
:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
|
||||
|
||||
```javascript
|
||||
// PREF: set DoH provider
|
||||
user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000048"); // Hagezi Light + TIF
|
||||
```
|
||||
|
||||
#### Enforce DoH
|
||||
##### Option 1: Increased Protection
|
||||
[Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues.
|
||||
|
||||
> [!TIP]
|
||||
> Use this setting if your workplace or university causes issues with alternative DNS.
|
||||
|
||||
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Increased Protection*
|
||||
|
||||
```javascript
|
||||
// PREF: enforce DNS-over-HTTPS (DoH)
|
||||
user_pref("network.trr.mode", 2);
|
||||
user_pref("network.trr.max-fails", 5);
|
||||
```
|
||||
|
||||
##### Option 2: Max Protection
|
||||
[Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions.
|
||||
|
||||
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection*
|
||||
|
||||
```javascript
|
||||
// PREF: enforce DNS-over-HTTPS (DoH)
|
||||
user_pref("network.trr.mode", 3);
|
||||
```
|
||||
|
||||
***
|
||||
|
||||
### Disk Cache
|
||||
Keep in mind that disabling the disk cache is only available on Firefox. It is not an option in any other browser.
|
||||
|
||||
@@ -187,46 +227,6 @@ For either option, you can create exceptions to stay logged in to some sites.
|
||||
|
||||
***
|
||||
|
||||
### Secure DNS
|
||||
Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-dns-over-https) (DoH).
|
||||
|
||||
#### DoH Provider
|
||||
Use the DoH address below to protect against security threats, ads, trackers, and some annoyances. It is using DNSwarden's free DNS with Hagezi's [Pro](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#pro) and [threat intelligence](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif) lists.
|
||||
|
||||
:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
|
||||
|
||||
```javascript
|
||||
// PREF: set DoH provider
|
||||
user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000018"); // Hagezi Pro + TIF
|
||||
```
|
||||
|
||||
#### Enforce DoH
|
||||
##### Option 1: Increased Protection
|
||||
[Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues.
|
||||
|
||||
> [!TIP]
|
||||
> Use this setting if your workplace or university causes issues with alternative DNS.
|
||||
|
||||
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Increased Protection*
|
||||
|
||||
```javascript
|
||||
// PREF: enforce DNS-over-HTTPS (DoH)
|
||||
user_pref("network.trr.mode", 2);
|
||||
user_pref("network.trr.max-fails", 5);
|
||||
```
|
||||
|
||||
##### Option 2: Max Protection
|
||||
[Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions.
|
||||
|
||||
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection*
|
||||
|
||||
```javascript
|
||||
// PREF: enforce DNS-over-HTTPS (DoH)
|
||||
user_pref("network.trr.mode", 3);
|
||||
```
|
||||
|
||||
***
|
||||
|
||||
### Disable DRM
|
||||
Privacy-conscious people often dislike Digital Rights Management (DRM) because it restricts what users can do with their devices and limits fair use rights. DRM prevents users from copying, sharing, or changing content they bought, even for their own use. DRM allow browsers to communicate to outside servers to check licenses and rights, which can share data about what users do and watch.
|
||||
|
||||
|
||||
Reference in New Issue
Block a user