user.js file for configuring and hardening Fennec F-Droid privacy, security and anti-fingerprinting.
This repository has been archived on 2020-10-12. You can view files and clone it, but cannot push or open issues or pull requests.
Go to file
quindecim 96da182e37
Update user.js
 Sorted lot of rules and sections
 Adjusted credits (added pyllyukko)
 Control TLS versions with min (1.2) and max (1.3)
 Added some descriptions
 Enebled warn the user when server doesn't support RFC 5746 ("safe" renegotiation)
 Set control "Add Security Exception" dialog on SSL warnings to "pre-populate url" only
 Enabled display advanced information on Insecure Connection warning pages
️ Disabled old SSL/TLS "insecure" renegotiation
️ Disabled SSL Error Reporting
️ Disabled TLS1.3 0-RTT (round-trip time)
️ Disallowed SHA-1
️ Disabled Family Safety cert
️ Disabled 3DES, 128 bits, DHE (Diffie-Hellman Key Exchange), and the remaining non-modern cipher suites
️ Disabled resource timing API
️ Disabled sensor API
️ Disabled gamepad API (USB device ID enumeration)
️ Disabled "dom.netinfo" (giving away network info)
️ Disabled video statistics (JS performance fingerprinting)
️ Disabled touch(screen) events
️ Disabled MediaDevices change detection
️ Disabled WebGL debug info being available to websites
️ Disabled PointerEvents
2019-04-28 23:52:16 +00:00
user.js Update user.js 2019-04-28 23:52:16 +00:00