/* Certificates and trust */
+
/* Disable OCSP, which checks for certificate revocation by sending
* your browser history to a third-party. I think this leaves stapling
* enabled, which is what we should be using anyway. Not that I believe
*
*/
user_pref("security.OCSP.enabled", 0);
+
*/
user_pref("network.cookie.lifetimePolicy", 2);
-
*
*/
user_pref("network.http.referer.XOriginTrimmingPolicy", 1);
+
* 1. https://wiki.mozilla.org/Privacy/Privacy_Task_Force/firefox_about_config_privacy_tweeks
*/
user_pref("browser.urlbar.speculativeConnect.enabled", false);
+
* 1. https://www.contextis.com/en/blog/webgl-a-new-dimension-for-browser-exploitation
*
*/
-user_pref("webgl.disabled", true);
\ No newline at end of file
+user_pref("webgl.disabled", true);
+