1
0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 07:30:47 +05:30

Updated Optional Hardening (markdown)

yokoffing
2024-09-09 11:33:27 -04:00
parent 7876a0816c
commit 9730f3d8a7
+40 -40
@@ -84,6 +84,46 @@ user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
***
### Secure DNS
Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-dns-over-https) (DoH).
#### DoH Provider
Use the DoH address below to protect against security threats, ads, and trackers. It uses [DNSwarden](https://dnswarden.com/) with Hagezi's [Light](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#light) list and [threat intelligence feeds](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif).
:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
```javascript
// PREF: set DoH provider
user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000048"); // Hagezi Light + TIF
```
#### Enforce DoH
##### Option 1: Increased Protection
[Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues.
> [!TIP]
> Use this setting if your workplace or university causes issues with alternative DNS.
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Increased Protection*
```javascript
// PREF: enforce DNS-over-HTTPS (DoH)
user_pref("network.trr.mode", 2);
user_pref("network.trr.max-fails", 5);
```
##### Option 2: Max Protection
[Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions.
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection*
```javascript
// PREF: enforce DNS-over-HTTPS (DoH)
user_pref("network.trr.mode", 3);
```
***
### Disk Cache
Keep in mind that disabling the disk cache is only available on Firefox. It is not an option in any other browser.
@@ -187,46 +227,6 @@ For either option, you can create exceptions to stay logged in to some sites.
***
### Secure DNS
Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-dns-over-https) (DoH).
#### DoH Provider
Use the DoH address below to protect against security threats, ads, trackers, and some annoyances. It is using DNSwarden's free DNS with Hagezi's [Pro](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#pro) and [threat intelligence](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif) lists.
:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network.
```javascript
// PREF: set DoH provider
user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000018"); // Hagezi Pro + TIF
```
#### Enforce DoH
##### Option 1: Increased Protection
[Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues.
> [!TIP]
> Use this setting if your workplace or university causes issues with alternative DNS.
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Increased Protection*
```javascript
// PREF: enforce DNS-over-HTTPS (DoH)
user_pref("network.trr.mode", 2);
user_pref("network.trr.max-fails", 5);
```
##### Option 2: Max Protection
[Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions.
* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection*
```javascript
// PREF: enforce DNS-over-HTTPS (DoH)
user_pref("network.trr.mode", 3);
```
***
### Disable DRM
Privacy-conscious people often dislike Digital Rights Management (DRM) because it restricts what users can do with their devices and limits fair use rights. DRM prevents users from copying, sharing, or changing content they bought, even for their own use. DRM allow browsers to communicate to outside servers to check licenses and rights, which can share data about what users do and watch.