netwerk/base/public/security-prefs.js@b8a032363ba2 (annotated)
netwerk/base/public/security-prefs.js
Thu, 22 Jan 2015 13:21:57 +0100
- author
- Michael Schloh von Bennewitz <michael@schloh.com>
- date
- Thu, 22 Jan 2015 13:21:57 +0100
- branch
- TOR_BUG_9701
- changeset 15
- b8a032363ba2
- permissions
- -rw-r--r--
Incorporate requested changes from Mozilla in review:
https://bugzilla.mozilla.org/show_bug.cgi?id=1123480#c6
| michael@0 | 1 | /* This Source Code Form is subject to the terms of the Mozilla Public |
| michael@0 | 2 | * License, v. 2.0. If a copy of the MPL was not distributed with this |
| michael@0 | 3 | * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
| michael@0 | 4 | |
| michael@0 | 5 | pref("security.tls.version.min", 1); |
| michael@0 | 6 | pref("security.tls.version.max", 3); |
| michael@0 | 7 | |
| michael@0 | 8 | pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", false); |
| michael@0 | 9 | pref("security.ssl.renego_unrestricted_hosts", ""); |
| michael@0 | 10 | pref("security.ssl.treat_unsafe_negotiation_as_broken", false); |
| michael@0 | 11 | pref("security.ssl.require_safe_negotiation", false); |
| michael@0 | 12 | pref("security.ssl.warn_missing_rfc5746", 1); |
| michael@0 | 13 | pref("security.ssl.enable_ocsp_stapling", true); |
| michael@0 | 14 | pref("security.ssl.enable_false_start", true); |
| michael@0 | 15 | pref("security.ssl.false_start.require-npn", true); |
| michael@0 | 16 | pref("security.ssl.false_start.require-forward-secrecy", true); |
| michael@0 | 17 | pref("security.ssl.enable_npn", true); |
| michael@0 | 18 | pref("security.ssl.enable_alpn", false); |
| michael@0 | 19 | |
| michael@0 | 20 | pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true); |
| michael@0 | 21 | pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true); |
| michael@0 | 22 | pref("security.ssl3.ecdhe_rsa_aes_128_sha", true); |
| michael@0 | 23 | pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true); |
| michael@0 | 24 | pref("security.ssl3.ecdhe_rsa_aes_256_sha", true); |
| michael@0 | 25 | pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true); |
| michael@0 | 26 | pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true); |
| michael@0 | 27 | pref("security.ssl3.dhe_rsa_aes_128_sha", true); |
| michael@0 | 28 | pref("security.ssl3.dhe_rsa_camellia_128_sha", true); |
| michael@0 | 29 | pref("security.ssl3.dhe_rsa_aes_256_sha", true); |
| michael@0 | 30 | pref("security.ssl3.dhe_rsa_camellia_256_sha", true); |
| michael@0 | 31 | pref("security.ssl3.dhe_rsa_des_ede3_sha", true); |
| michael@0 | 32 | pref("security.ssl3.dhe_dss_aes_128_sha", true); |
| michael@0 | 33 | pref("security.ssl3.dhe_dss_aes_256_sha", true); |
| michael@0 | 34 | pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true); |
| michael@0 | 35 | pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true); |
| michael@0 | 36 | pref("security.ssl3.rsa_aes_128_sha", true); |
| michael@0 | 37 | pref("security.ssl3.rsa_camellia_128_sha", true); |
| michael@0 | 38 | pref("security.ssl3.rsa_aes_256_sha", true); |
| michael@0 | 39 | pref("security.ssl3.rsa_camellia_256_sha", true); |
| michael@0 | 40 | pref("security.ssl3.rsa_des_ede3_sha", true); |
| michael@0 | 41 | pref("security.ssl3.rsa_rc4_128_sha", true); |
| michael@0 | 42 | pref("security.ssl3.rsa_rc4_128_md5", true); |
| michael@0 | 43 | |
| michael@0 | 44 | pref("security.ssl3.rsa_fips_des_ede3_sha", false); |
| michael@0 | 45 | pref("security.ssl3.dhe_dss_camellia_256_sha", false); |
| michael@0 | 46 | pref("security.ssl3.dhe_dss_camellia_128_sha", false); |
| michael@0 | 47 | pref("security.ssl3.rsa_seed_sha", false); |
| michael@0 | 48 | |
| michael@0 | 49 | pref("security.default_personal_cert", "Ask Every Time"); |
| michael@0 | 50 | pref("security.remember_cert_checkbox_default_setting", true); |
| michael@0 | 51 | pref("security.ask_for_password", 0); |
| michael@0 | 52 | pref("security.password_lifetime", 30); |
| michael@0 | 53 | |
| michael@0 | 54 | pref("security.OCSP.enabled", 1); |
| michael@0 | 55 | pref("security.OCSP.require", false); |
| michael@0 | 56 | pref("security.OCSP.GET.enabled", false); |
| michael@0 | 57 | |
| michael@0 | 58 | pref("security.use_mozillapkix_verification", true); |
| michael@0 | 59 | |
| michael@0 | 60 | // If set to true, disables sending SSL3 Session IDs and TLS Session Tickets, |
| michael@0 | 61 | // to prevent session tracking: |
| michael@0 | 62 | pref("security.ssl.disable_session_identifiers", false); |
