diff --git a/Optional-Hardening.md b/Optional-Hardening.md index a514753..46f43ec 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -96,7 +96,7 @@ user_pref("dom.security.https_only_mode", true); user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); ``` -:bulb: HTTPS doesn't mean "trust this." It means "this is private." You may be having a private conversation with Satan. — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure) +:warning: HTTPS doesn't mean "trust this." It means "this is private." You may be having a private conversation with Satan. — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure) *** @@ -143,10 +143,10 @@ user_pref("privacy.clearOnShutdown.siteSettings", false); user_pref("browser.sessionstore.privacy_level", 2); ``` -:warning: If you have session restore enable (`☰` _→ Settings → General → Startup → Open previous windows and tabs_), then you will need to use **Option 1** for session restore to work. +:bulb: If you have [session restore](https://support.mozilla.org/en-US/kb/how-do-i-restore-my-tabs-last-time#w_restore-the-previous-session-every-time-you-open-firefox) enable, then you will need to use **Option 1** for session restore to work. #### Allow exceptions -You can allow exceptions if you want to stay logged in to some sites: +You can allow exceptions if you want to stay logged in to some sites. * `☰` *→ Settings → Privacy & Security → Cookies and Site Data → Manage Exceptions* *** @@ -177,19 +177,6 @@ user_pref("network.trr.uri", "https://dns.quad9.net/dns-query"); *** -### default-browser-agent (Windows only) -On Windows, Mozilla [collects information](https://techdows.com/2020/04/what-is-firefox-default-browser-agent-and-how-to-disable-it.html) on what you've set as your default browser. However, disabling `default-browser-agent.enabled` also breaks the `Make Default...` button to set Firefox as the default browser. - -Add it to your overrides if you do not use this part of the UI (or already have Firefox set as the default browser). - -```javascript -// PREF: disable telemetry of what default browser you use [WINDOWS] -// [NOTE] Breaks "Make Default..." button in Settings. -user_pref("default-browser-agent.enabled", false); -``` - -*** - ### Require Safe Negotiation Block connections to servers that don't support [RFC 5746](https://datatracker.ietf.org/doc/html/rfc5746) as they're potentially [vulnerable](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-3555) to a man-in-the-middle attack. @@ -206,6 +193,20 @@ user_pref("security.ssl.require_safe_negotiation", true); *** +### default-browser-agent +On Windows, Mozilla [collects information](https://techdows.com/2020/04/what-is-firefox-default-browser-agent-and-how-to-disable-it.html) on what you've set as your default browser. However, disabling `default-browser-agent.enabled` also breaks the `Make Default...` button to set Firefox as the default browser. + +:warning: Breaks **Make Default...** button in the settings for Firefox (Windows). + +:bulb: Add this pref if you do not use this part of the UI or if you have already set Firefox as the default browser. + +```javascript +// PREF: disable telemetry of what default browser you use [WINDOWS] +user_pref("default-browser-agent.enabled", false); +``` + +*** + ### Fingerprinting Fingerprinting is a high [threat model](https://thenewoil.org/en/guides/prologue/threatmodel/) issue that is only [addressed](https://github.com/arkenfox/user.js/wiki/3.3-Overrides-%5BTo-RFP-or-Not%5D#-fingerprinting) reasonably by Tor.[1](https://youtu.be/5NrbdO4yWek?t=4334) Please use the [Tor Browser](https://www.torproject.org) if your context calls for **anonymity** and not just reasonable **privacy**.^[*what's the difference?*](https://thenewoil.org/en/guides/prologue/secprivanon/)