From 3d605d2ed18f1841c90e43b00d5ace9457d7ee4f Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Fri, 18 Feb 2022 23:12:15 +0000 Subject: [PATCH] 1224 crlite: add value info --- user.js | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/user.js b/user.js index fa2c08c..1b7de53 100644 --- a/user.js +++ b/user.js @@ -514,7 +514,10 @@ user_pref("security.family_safety.mode", 0); * [1] https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/16206 ***/ user_pref("security.cert_pinning.enforcement_level", 2); /* 1224: enable CRLite [FF73+] - * In FF84+ it covers valid certs and in mode 2 doesn't fall back to OCSP + * 0 = disabled + * 1 = consult CRLite but only collect telemetry (default) + * 2 = consult CRLite and enforce both "Revoked" and "Not Revoked" results + * 3 = consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked" (FF99+) * [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1429800,1670985,1753071 * [2] https://blog.mozilla.org/security/tag/crlite/ ***/ user_pref("security.remote_settings.crlite_filters.enabled", true);