From d55bcdbf2be632136118671203b656ce14b22b24 Mon Sep 17 00:00:00 2001
From: quindecim <quindecim@airmail.cc>
Date: Thu, 7 May 2020 13:43:13 -0400
Subject: [PATCH] Update 'config/distribution/policies.json'
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

⛔️ Disabled some non secure ciphers | FF76
⛔️ Disabled autoplay for audio and video | FF76
---
 config/distribution/policies.json | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/config/distribution/policies.json b/config/distribution/policies.json
index 937ab9e..b1f3429 100644
--- a/config/distribution/policies.json
+++ b/config/distribution/policies.json
@@ -20,6 +20,18 @@
 
     "DisableMasterPasswordCreation": true,
 
+    "DisabledCiphers": {
+      "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": false,
+      "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": false,
+      "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": false,
+      "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": false,
+      "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true,
+      "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true,
+      "TLS_RSA_WITH_AES_128_CBC_SHA": false,
+      "TLS_RSA_WITH_AES_256_CBC_SHA": false,
+      "TLS_RSA_WITH_3DES_EDE_CBC_SHA": false
+    },
+
     "DisableDefaultBrowserAgent": true,
 
     "DisableFeedbackCommands": true,
@@ -128,6 +140,12 @@
         "Block": ["https://example.edu"],
         "BlockNewRequests": true,
         "Locked": true
+      },
+      "Autoplay": {
+        "Allow": ["https://example.org"],
+        "Block": ["https://example.edu"],
+        "Default": "block-audio-video",
+        "Locked": true
       }
     },