From 18dbb56a3d143a97dc2f78e0cf63c4565c16db33 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Sat, 24 Jul 2021 12:51:15 +0000 Subject: [PATCH] put 1203 back see https://github.com/arkenfox/user.js/commit/3bb9fc713f141d794fc4adfb38d3fcf86c9307ab --- user.js | 2 ++ 1 file changed, 2 insertions(+) diff --git a/user.js b/user.js index baded50..164a4b9 100644 --- a/user.js +++ b/user.js @@ -645,6 +645,8 @@ user_pref("security.ssl.require_safe_negotiation", true); * [1] https://www.ssllabs.com/ssl-pulse/ ***/ // user_pref("security.tls.version.min", 3); // [DEFAULT: 3] // user_pref("security.tls.version.max", 4); +/* 1203: enforce TLS 1.0 and 1.1 downgrades as session only ***/ +user_pref("security.tls.version.enable-deprecated", false); /* 1204: disable SSL session tracking [FF36+] * SSL Session IDs are unique and last up to 24hrs in Firefox (or longer with prolongation attacks) * [NOTE] These are not used in PB mode. In normal windows they are isolated when using FPI (4001)