From d20fe83084810b4f47438e236e1c8aecac851950 Mon Sep 17 00:00:00 2001 From: HJ <11689349+yokoffing@users.noreply.github.com> Date: Wed, 4 Oct 2023 21:58:41 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 16 ---------------- 1 file changed, 16 deletions(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index 63a0a2d..78df693 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -177,22 +177,6 @@ user_pref("security.ssl.require_safe_negotiation", true); *** -### Cross-origin referer -Do not send a [referer](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referer) when navigating to a different site (e.g., `google.com` → `facebook.com`). - -For subresources, the referer will only be sent to subdomains (e.g., `a.example.com` → `b.example.com`). - -:warning: This will break Instagram embeds, Bing login, `MangaPill.com`, and some images/videos. - -Most navigational "tracking" is harmless (i.e., the same for everyone) and effectively blocking cross-site referers just breaks a lot of sites. - -```javascript -// PREF: do not to send a referrer when navigating to a different site -user_pref("network.http.referer.XOriginPolicy", 1); -``` - -*** - ### Fingerprinting Fingerprinting is a high [threat model](https://thenewoil.org/en/guides/prologue/threatmodel/) issue that is only [addressed](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) reasonably by Tor.[1](https://youtu.be/5NrbdO4yWek?t=4334) Please use the [Tor Browser](https://www.torproject.org) if your context calls for **anonymity** and not just reasonable **privacy**.^[*what's the difference?*](https://thenewoil.org/en/guides/prologue/secprivanon/)