diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 6f38e6c..1f03f2c 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -58,7 +58,9 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", ""); Betterfox already [blocks](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages and [attempts to upgrade](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) HTTP site navigation to HTTPS. > [!NOTE] -> HTTPS doesn't mean "trust this." It means "this is private." You may be having a private conversation with Satan. — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure) +> HTTPS doesn't mean "trust this." It means "this is private."
+> You may be having a private conversation with Satan.
+> — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure) #### Option 1: Private windows only Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)). @@ -184,7 +186,6 @@ user_pref("network.trr.max-fails", 5); ```javascript // PREF: enforce DNS-over-HTTPS (DoH) user_pref("network.trr.mode", 3); -user_pref("network.dns.skipTRR-when-parental-control-enabled", false); ``` #### Manage exceptions