From e10d4cff65d8c7674efe91f705558860d908c59e Mon Sep 17 00:00:00 2001 From: HJ <11689349+yokoffing@users.noreply.github.com> Date: Fri, 6 Oct 2023 00:08:36 -0400 Subject: [PATCH] Updated Optional Hardening (markdown) --- Optional-Hardening.md | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/Optional-Hardening.md b/Optional-Hardening.md index a03c99c..d670f87 100644 --- a/Optional-Hardening.md +++ b/Optional-Hardening.md @@ -54,8 +54,8 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", ""); ### HTTPS-Only Mode We already: -* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages, including insecure downloads -* [attempt](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) to upgrade HTTP site navigation to HTTPS +* [block](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages, including insecure downloads. +* [attempt](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) to upgrade HTTP site navigation to HTTPS. To add to your overrides, choose between two options below. @@ -79,6 +79,8 @@ user_pref("dom.security.https_only_mode", true); user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); ``` +:bulb: HTTPS doesn't mean "trust this." It means "this is private." You may having a private conversation with Satan. — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure) + *** ### `default-browser-agent` (Windows only)