notkshitij/Betterfox
1
0
Fork 0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 15:40:48 +05:30
Code Issues Releases Wiki Activity

Updated Optional Hardening (markdown)

HJ
2023-10-04 21:58:41 -04:00
parent df2f57c710
commit d20fe83084
1 changed files with 0 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Optional-Hardening.md
-16
@@ -177,22 +177,6 @@ user_pref("security.ssl.require_safe_negotiation", true);
***
### Cross-origin referer
Do not send a [referer](https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Referer) when navigating to a different site (e.g., `google.com` → `facebook.com`).
For subresources, the referer will only be sent to subdomains (e.g., `a.example.com` → `b.example.com`).
:warning: This will break Instagram embeds, Bing login, `MangaPill.com`, and some images/videos.
Most navigational "tracking" is harmless (i.e., the same for everyone) and effectively blocking cross-site referers just breaks a lot of sites.
```javascript
// PREF: do not to send a referrer when navigating to a different site
user_pref("network.http.referer.XOriginPolicy", 1);
```
***
### Fingerprinting
Fingerprinting is a high [threat model](https://thenewoil.org/en/guides/prologue/threatmodel/) issue that is only [addressed](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) reasonably by Tor.<sup>[1](https://youtu.be/5NrbdO4yWek?t=4334)</sup> Please use the [Tor Browser](https://www.torproject.org) if your context calls for **anonymity** and not just reasonable **privacy**.<sup>^[*what's the difference?*](https://thenewoil.org/en/guides/prologue/secprivanon/)</sup>