From 27d72eda9eed2c065cc6397e4e9b03c86ffa6424 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Thu, 7 May 2020 06:20:10 +0000 Subject: [PATCH] 1244: https-only-mode --- user.js | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/user.js b/user.js index d0f7767..eb4735f 100644 --- a/user.js +++ b/user.js @@ -736,6 +736,10 @@ user_pref("security.mixed_content.block_display_content", true); /* 1243: block unencrypted requests from Flash on encrypted pages to mitigate MitM attacks [FF59+] * [1] https://bugzilla.mozilla.org/1190623 ***/ user_pref("security.mixed_content.block_object_subrequest", true); +/* 1244: enable https-only-mode [FF76+] + * [NOTE] This is experimental + * [1] https://bugzilla.mozilla.org/1613063 */ + // user_pref("dom.security.https_only_mode", true); /** CIPHERS [WARNING: do not meddle with your cipher suite: see the section 1200 intro] ***/ /* 1261: disable 3DES (effective key size < 128)