From f428692de8b59ab89a66502c079e1823dfda8aeb Mon Sep 17 00:00:00 2001 From: Thomas Groman Date: Tue, 17 Mar 2020 15:06:22 -0700 Subject: Always ask before screensharing no matter who it is --- branding/shared/pref/preferences.inc | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/branding/shared/pref/preferences.inc b/branding/shared/pref/preferences.inc index 6c84256..9f7c7d8 100644 --- a/branding/shared/pref/preferences.inc +++ b/branding/shared/pref/preferences.inc @@ -87,6 +87,7 @@ pref("image.mem.decode_bytes_at_a_time", 65536); //larger chunks // Make sure we shortcut out of a11y to save walking unnecessary code pref("accessibility.force_disabled", 1); +// ===| Privacy |============================================================== // Disable OCSP Stapling which sends every website visited to the CA's server // and is easily defeatable by sending a '3' response code making the whole // standard meaningless to protect against MITM attacks with stolen privkeys. @@ -100,8 +101,12 @@ pref("security.OCSP.enabled", 0); pref("security.ssl.must_staple", true); pref("security.OCSP.require", true); +// Enable Oppurtunistic encryption for HTTP/2 alt-service by default pref("network.http.altsvc.oe", true); +// Do not preload exceptions for anybody to capture screen +pref("media.getusermedia.screensharing.allowed_domains", ""); + // ============================================================================ // ===| DevTools |============================================================= -- cgit v1.2.3