|
1 /* This Source Code Form is subject to the terms of the Mozilla Public |
|
2 * License, v. 2.0. If a copy of the MPL was not distributed with this |
|
3 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ |
|
4 |
|
5 pref("security.tls.version.min", 1); |
|
6 pref("security.tls.version.max", 3); |
|
7 |
|
8 pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", false); |
|
9 pref("security.ssl.renego_unrestricted_hosts", ""); |
|
10 pref("security.ssl.treat_unsafe_negotiation_as_broken", false); |
|
11 pref("security.ssl.require_safe_negotiation", false); |
|
12 pref("security.ssl.warn_missing_rfc5746", 1); |
|
13 pref("security.ssl.enable_ocsp_stapling", true); |
|
14 pref("security.ssl.enable_false_start", true); |
|
15 pref("security.ssl.false_start.require-npn", true); |
|
16 pref("security.ssl.false_start.require-forward-secrecy", true); |
|
17 pref("security.ssl.enable_npn", true); |
|
18 pref("security.ssl.enable_alpn", false); |
|
19 |
|
20 pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true); |
|
21 pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true); |
|
22 pref("security.ssl3.ecdhe_rsa_aes_128_sha", true); |
|
23 pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true); |
|
24 pref("security.ssl3.ecdhe_rsa_aes_256_sha", true); |
|
25 pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true); |
|
26 pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true); |
|
27 pref("security.ssl3.dhe_rsa_aes_128_sha", true); |
|
28 pref("security.ssl3.dhe_rsa_camellia_128_sha", true); |
|
29 pref("security.ssl3.dhe_rsa_aes_256_sha", true); |
|
30 pref("security.ssl3.dhe_rsa_camellia_256_sha", true); |
|
31 pref("security.ssl3.dhe_rsa_des_ede3_sha", true); |
|
32 pref("security.ssl3.dhe_dss_aes_128_sha", true); |
|
33 pref("security.ssl3.dhe_dss_aes_256_sha", true); |
|
34 pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true); |
|
35 pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true); |
|
36 pref("security.ssl3.rsa_aes_128_sha", true); |
|
37 pref("security.ssl3.rsa_camellia_128_sha", true); |
|
38 pref("security.ssl3.rsa_aes_256_sha", true); |
|
39 pref("security.ssl3.rsa_camellia_256_sha", true); |
|
40 pref("security.ssl3.rsa_des_ede3_sha", true); |
|
41 pref("security.ssl3.rsa_rc4_128_sha", true); |
|
42 pref("security.ssl3.rsa_rc4_128_md5", true); |
|
43 |
|
44 pref("security.ssl3.rsa_fips_des_ede3_sha", false); |
|
45 pref("security.ssl3.dhe_dss_camellia_256_sha", false); |
|
46 pref("security.ssl3.dhe_dss_camellia_128_sha", false); |
|
47 pref("security.ssl3.rsa_seed_sha", false); |
|
48 |
|
49 pref("security.default_personal_cert", "Ask Every Time"); |
|
50 pref("security.remember_cert_checkbox_default_setting", true); |
|
51 pref("security.ask_for_password", 0); |
|
52 pref("security.password_lifetime", 30); |
|
53 |
|
54 pref("security.OCSP.enabled", 1); |
|
55 pref("security.OCSP.require", false); |
|
56 pref("security.OCSP.GET.enabled", false); |
|
57 |
|
58 pref("security.use_mozillapkix_verification", true); |
|
59 |
|
60 // If set to true, disables sending SSL3 Session IDs and TLS Session Tickets, |
|
61 // to prevent session tracking: |
|
62 pref("security.ssl.disable_session_identifiers", false); |