From: Michael Orlitzky <michael@orlitzky.com>
Date: Thu, 2 Apr 2020 00:54:06 +0000 (-0400)
Subject: tracking: disable DNS-over-HTTPS and the "Normandy" service.
X-Git-Url: https://gitweb.michael.orlitzky.com/?a=commitdiff_plain;h=b9cbdb3ee6c7546dd4c20eaa322351e9f417bdb3;p=firefox-user-prefs.git

tracking: disable DNS-over-HTTPS and the "Normandy" service.
---

diff --git a/tracking b/tracking
index c585cac..648c04e 100644
--- a/tracking
+++ b/tracking
@@ -77,3 +77,29 @@ user_pref("geo.enabled", false);
  */
 user_pref("webgl.disabled", true);
 
+
+/* Disable DNS-over-HTTPS (DoH), which is a helpful service that sends
+ * all of your DNS requests to Cloudflare. DoH is presently disabled
+ * by default in Gentoo, but let's disable it again so that we're not
+ * subject to the whims of the Gentoo security/privacy zeitgeist.
+ *
+ * References:
+ *
+ * 1. https://wiki.mozilla.org/Trusted_Recursive_Resolver#network.trr.mode
+ *
+ */
+user_pref("network.trr.mode", 5);
+
+
+/* Disable the "Normandy" service, which allows Mozilla to force-push
+ * invasive (the irony of word-association is not lost here) preference
+ * updates to your browser. Normandy is presently disabled by default in
+ * Gentoo, but it's the sort of thing worth killing twice, just to be sure.
+ *
+ * References:
+ *
+ * 1. https://wiki.mozilla.org/Firefox/Normandy/PreferenceRollout
+ * 2. https://wiki.mozilla.org/Firefox/Shield/Heartbeat
+ *
+ */
+user_pref("app.normandy.enabled", false);