notkshitij/Betterfox
1
0
Fork 0
mirror of https://github.com/yokoffing/Betterfox.git synced 2026-06-12 15:40:48 +05:30
Code Issues Releases Wiki Activity

Updated Optional Hardening (markdown)

yokoffing
2024-09-12 14:38:39 -04:00
parent cb196afdef
commit e5608a090b
1 changed files with 8 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Optional-Hardening.md
+8 -5
@@ -55,12 +55,10 @@ user_pref("urlclassifier.features.socialtracking.skipURLs", "");
*** ***
### HTTPS-Only Mode ### HTTPS-Only Mode
Betterfox already [blocks](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages and [attempts to upgrade](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) HTTP site navigation to HTTPS. Betterfox already [blocks](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L810-L827) HTTP subresources from loading on HTTPS pages. We also [attempt to upgrade](https://github.com/yokoffing/Betterfox/blob/df5fc26a1bdccd30e01f3c1dfe69a09a2c050410/Securefox.js#L545-L550) all site navigation, only falling back to insecure connections when a website does not support it.
> [!NOTE] > [!WARNING]
> HTTPS doesn't mean "trust this." It means "this is private." <br> > HTTPS-Only Mode sometimes causes annoying navigational errors when using DoH. <br>
> You may be having a private conversation with Satan. <br>
> — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure)
#### Option 1: Private windows only #### Option 1: Private windows only
Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)). Firefox will get explicit permission from you before connecting to a site insecurely in [Private Browsing](https://support.mozilla.org/en-US/kb/private-browsing-use-firefox-without-history) (Firefox [incognito mode](https://support.mozilla.org/en-US/kb/common-myths-about-private-browsing)).
@@ -82,6 +80,11 @@ user_pref("dom.security.https_only_mode", true);
user_pref("dom.security.https_only_mode_error_page_user_suggestions", true); user_pref("dom.security.https_only_mode_error_page_user_suggestions", true);
``` ```
> [!NOTE]
> HTTPS doesn't mean "trust this." It means "this is private." <br>
> You may be having a private conversation with Satan. <br>
> — [Scott Hanselman](https://www.hanselman.com/blog/how-do-we-know-if-mobile-apps-are-secure)
*** ***
### Secure DNS ### Secure DNS