The Tor Browser: netwerk/base/public/security-prefs.js@ca08bd8f51b2

     1 /* This Source Code Form is subject to the terms of the Mozilla Public

     2  * License, v. 2.0. If a copy of the MPL was not distributed with this

     3  * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

     5 pref("security.tls.version.min", 1);

     6 pref("security.tls.version.max", 3);

     8 pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", false);

     9 pref("security.ssl.renego_unrestricted_hosts", "");

    10 pref("security.ssl.treat_unsafe_negotiation_as_broken", false);

    11 pref("security.ssl.require_safe_negotiation",  false);

    12 pref("security.ssl.warn_missing_rfc5746",  1);

    13 pref("security.ssl.enable_ocsp_stapling", true);

    14 pref("security.ssl.enable_false_start", true);

    15 pref("security.ssl.false_start.require-npn", true);

    16 pref("security.ssl.false_start.require-forward-secrecy", true);

    17 pref("security.ssl.enable_npn", true);

    18 pref("security.ssl.enable_alpn", false);

    20 pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true);

    21 pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true);

    22 pref("security.ssl3.ecdhe_rsa_aes_128_sha", true);

    23 pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true);

    24 pref("security.ssl3.ecdhe_rsa_aes_256_sha", true);

    25 pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true);

    26 pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true);

    27 pref("security.ssl3.dhe_rsa_aes_128_sha", true);

    28 pref("security.ssl3.dhe_rsa_camellia_128_sha", true);

    29 pref("security.ssl3.dhe_rsa_aes_256_sha", true);

    30 pref("security.ssl3.dhe_rsa_camellia_256_sha", true);

    31 pref("security.ssl3.dhe_rsa_des_ede3_sha", true);

    32 pref("security.ssl3.dhe_dss_aes_128_sha", true);

    33 pref("security.ssl3.dhe_dss_aes_256_sha", true);

    34 pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true);

    35 pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true);

    36 pref("security.ssl3.rsa_aes_128_sha", true);

    37 pref("security.ssl3.rsa_camellia_128_sha", true);

    38 pref("security.ssl3.rsa_aes_256_sha", true);

    39 pref("security.ssl3.rsa_camellia_256_sha", true);

    40 pref("security.ssl3.rsa_des_ede3_sha", true);

    41 pref("security.ssl3.rsa_rc4_128_sha", true);

    42 pref("security.ssl3.rsa_rc4_128_md5", true);

    44 pref("security.ssl3.rsa_fips_des_ede3_sha", false);

    45 pref("security.ssl3.dhe_dss_camellia_256_sha", false);

    46 pref("security.ssl3.dhe_dss_camellia_128_sha", false);

    47 pref("security.ssl3.rsa_seed_sha", false);

    49 pref("security.default_personal_cert",   "Ask Every Time");

    50 pref("security.remember_cert_checkbox_default_setting", true);

    51 pref("security.ask_for_password",        0);

    52 pref("security.password_lifetime",       30);

    54 pref("security.OCSP.enabled", 1);

    55 pref("security.OCSP.require", false);

    56 pref("security.OCSP.GET.enabled", false);

    58 pref("security.use_mozillapkix_verification", true);

    60 // If set to true, disables sending SSL3 Session IDs and TLS Session Tickets,

    61 // to prevent session tracking:

    62 pref("security.ssl.disable_session_identifiers", false);

The Tor Browser / file revision