diff -r 000000000000 -r 6474c204b198 netwerk/base/public/security-prefs.js --- /dev/null Thu Jan 01 00:00:00 1970 +0000 +++ b/netwerk/base/public/security-prefs.js Wed Dec 31 06:09:35 2014 +0100 @@ -0,0 +1,62 @@ +/* This Source Code Form is subject to the terms of the Mozilla Public + * License, v. 2.0. If a copy of the MPL was not distributed with this + * file, You can obtain one at http://mozilla.org/MPL/2.0/. */ + +pref("security.tls.version.min", 1); +pref("security.tls.version.max", 3); + +pref("security.ssl.allow_unrestricted_renego_everywhere__temporarily_available_pref", false); +pref("security.ssl.renego_unrestricted_hosts", ""); +pref("security.ssl.treat_unsafe_negotiation_as_broken", false); +pref("security.ssl.require_safe_negotiation", false); +pref("security.ssl.warn_missing_rfc5746", 1); +pref("security.ssl.enable_ocsp_stapling", true); +pref("security.ssl.enable_false_start", true); +pref("security.ssl.false_start.require-npn", true); +pref("security.ssl.false_start.require-forward-secrecy", true); +pref("security.ssl.enable_npn", true); +pref("security.ssl.enable_alpn", false); + +pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", true); +pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", true); +pref("security.ssl3.ecdhe_rsa_aes_128_sha", true); +pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", true); +pref("security.ssl3.ecdhe_rsa_aes_256_sha", true); +pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", true); +pref("security.ssl3.ecdhe_rsa_des_ede3_sha", true); +pref("security.ssl3.dhe_rsa_aes_128_sha", true); +pref("security.ssl3.dhe_rsa_camellia_128_sha", true); +pref("security.ssl3.dhe_rsa_aes_256_sha", true); +pref("security.ssl3.dhe_rsa_camellia_256_sha", true); +pref("security.ssl3.dhe_rsa_des_ede3_sha", true); +pref("security.ssl3.dhe_dss_aes_128_sha", true); +pref("security.ssl3.dhe_dss_aes_256_sha", true); +pref("security.ssl3.ecdhe_rsa_rc4_128_sha", true); +pref("security.ssl3.ecdhe_ecdsa_rc4_128_sha", true); +pref("security.ssl3.rsa_aes_128_sha", true); +pref("security.ssl3.rsa_camellia_128_sha", true); +pref("security.ssl3.rsa_aes_256_sha", true); +pref("security.ssl3.rsa_camellia_256_sha", true); +pref("security.ssl3.rsa_des_ede3_sha", true); +pref("security.ssl3.rsa_rc4_128_sha", true); +pref("security.ssl3.rsa_rc4_128_md5", true); + +pref("security.ssl3.rsa_fips_des_ede3_sha", false); +pref("security.ssl3.dhe_dss_camellia_256_sha", false); +pref("security.ssl3.dhe_dss_camellia_128_sha", false); +pref("security.ssl3.rsa_seed_sha", false); + +pref("security.default_personal_cert", "Ask Every Time"); +pref("security.remember_cert_checkbox_default_setting", true); +pref("security.ask_for_password", 0); +pref("security.password_lifetime", 30); + +pref("security.OCSP.enabled", 1); +pref("security.OCSP.require", false); +pref("security.OCSP.GET.enabled", false); + +pref("security.use_mozillapkix_verification", true); + +// If set to true, disables sending SSL3 Session IDs and TLS Session Tickets, +// to prevent session tracking: +pref("security.ssl.disable_session_identifiers", false);