Narsil
/
desktop_user.js
3
1
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

Update 'user.js'

This commit is contained in:
Narsil 2020-12-08 06:36:06 -05:00
parent b0f71bfb7d
commit e416051535
1 changed files with 4 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
user.js
View File

@ -408,16 +408,15 @@ user_pref("browser.send_pings.require_same_host", true); // defense-in-depth
// HTTP* / TCP/IP / DNS / PROXY / SOCKS etc ***/
// >>>>>>>>>>>>>>>>>>>>>
// Disable IPv6
// IPv6 can be abused, especially with MAC addresses, and they do not play nice with VPNs. That's
// even assuming your ISP and/or router and/or website can handle it. Sites will fall back to IPv4
// IPv6 can be abused, especially with MAC addresses, and can leak with VPNs. That's even
// assuming your ISP and/or router and/or website can handle it. Sites will fall back to IPv4
// STATS] Firefox telemetry (Dec 2020) shows ~8% of all connections are IPv6
// [NOTE] This is just an application level fallback. Disabling IPv6 is best done at an
// OS/network level, and/or configured properly in VPN setups. If you are not masking your IP,
// then this won't make much difference. If you are masking your IP, then it can only help.
// [NOTE] PHP defaults to IPv6 with "localhost". Use "php -S 127.0.0.1:PORT"
// [TEST] https://ipleak.org/
// https://github.com/arkenfox/user.js/issues/437#issuecomment-403740626
// https://www.internetsociety.org/tag/ipv6-security/ ***/
// https://www.internetsociety.org/tag/ipv6-security/
user_pref("network.dns.disableIPv6", true);
// -------------------------------------
// Disable HTTP2
@ -483,7 +482,7 @@ user_pref("network.trr.uri", "");
// unattended state (locked, encrypted, forensic hardened).
// [NOTE] The urlbar is also commonly referred to as the location bar and address bar
// #Required reading [#] https://xkcd.com/538/
// >>>>>>>>>>>>>>>>>>>>>
// -------------------------------------
// Disable location bar using search
// Don't leak URL typos to a search engine, give an error message instead.
// Examples: "secretplace,com", "secretplace/com", "secretplace com", "secret place.com"