From bb6deee66bf2272461bda617c9dcca1948dbecaa Mon Sep 17 00:00:00 2001 From: yokoffing <11689349+yokoffing@users.noreply.github.com> Date: Sat, 7 Sep 2024 17:35:38 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 12 +++++++++--- 1 file changed, 9 insertions(+), 3 deletions(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 85d10df..7bee3fb 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -191,20 +191,23 @@ For either option, you can create exceptions to stay logged in to some sites. Setup and enforce [DNS-over-HTTPS](https://support.mozilla.org/en-US/kb/firefox-dns-over-https) (DoH). #### DoH Provider -Use the provider below for better [threat protection](https://quad9.net/service/threat-blocking/). +Use the DoH address below to protect against security threats, ads, trackers, and some annoyances. It is using DNSwarden's free DNS with Hagezi's [Pro](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#pro) and [threat intelligence](https://github.com/hagezi/dns-blocklists?tab=readme-ov-file#tif) lists. -:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. ```javascript // PREF: set DoH provider -user_pref("network.trr.uri", "https://freedns.controld.com/x-hagezi-tif"); +user_pref("network.trr.uri", "https://dns.dnswarden.com/00000000000000000000018"); // Hagezi Pro + TIF ``` +:star: Create a profile with [NextDNS](https://nextdns.io/?from=xujj63g5) and follow our [configuration guide](https://github.com/yokoffing/NextDNS-Config) for greater protection from ads, trackers, and security threats. This will allow you to customize your solutions to your network. + #### Option 1: Increased Protection [Increased Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) will switch back to your local provider if there are any issues. > [!TIP] > Use this setting if your workplace or university causes issues with alternative DNS. +* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Increased Protection* + ```javascript // PREF: enforce DNS-over-HTTPS (DoH) user_pref("network.trr.mode", 2); @@ -213,6 +216,9 @@ user_pref("network.trr.max-fails", 5); #### Option 2: Max Protection [Max Protection](https://support.mozilla.org/en-US/kb/dns-over-https#w_protection-levels-explained) displays user-friendly error pages with custom exceptions. + +* `☰` *→ Settings → Privacy & Security → DNS over HTTPS → Enable DNS over HTTPS using: → Max Protection* + ```javascript // PREF: enforce DNS-over-HTTPS (DoH) user_pref("network.trr.mode", 3);