remove 1210

been default true since FF26 - thanks earthlng
This commit is contained in:
Thorin-Oakenpants 2021-05-25 17:30:40 +00:00 committed by GitHub
parent 0566ded651
commit 9419e2faab
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -658,9 +658,6 @@ user_pref("security.tls.enable_0rtt_data", false);
/** OCSP (Online Certificate Status Protocol)
#Required reading [#] https://scotthelme.co.uk/revocation-is-broken/ ***/
/* 1210: enable OCSP Stapling
* [1] https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/ ***/
user_pref("security.ssl.enable_ocsp_stapling", true);
/* 1211: control when to use OCSP fetching (to confirm current validity of certificates)
* 0=disabled, 1=enabled (default), 2=enabled for EV certificates only
* OCSP (non-stapled) leaks information about the sites you visit to the CA (cert authority)