Commit graph

34 commits

Author SHA1 Message Date
trav90
0c4e5ff00d Regenerate the HSTS preload list 2019-02-16 00:01:48 +08:00
trav90
70b28bf2ee Restore clearly-delimited format for the HSTS preload list 2019-02-16 00:01:46 +08:00
trav90
e8d7388622 Increase concurrent lookups to 15 when generating HSTS preload list 2019-02-16 00:01:45 +08:00
trav90
4752033ff0 Update HSTS preload list generation script
Previous behavior: if an entry was in the previously-used list, and there would be an error connecting to or processing the host, it would adopt it using the previous status, with a new minimum required max age TTL.
New behavior: if an entry is in the previously-used list, and there is an error connecting to or processing the host, it will be dropped from the preload list.

The old behavior would allow entries to persist on the HSTS preload list when they drop off the 'net. Considering domain churn, it would cause issues for new owners for having a persisted HSTS entry preloaded in the browser.
Bonus: it keeps our HSTS preload list lean.
2019-02-16 00:01:43 +08:00
JustOff
7ff80ee648 Request NSS to use DBM as the storage file format 2019-02-16 00:01:09 +08:00
wolfbeast
8c296a9714 Revert "Restore NSS default storage file format to DBM when no prefix is given."
This reverts commit b2c78bbf83f75bf034028814329fdd43b6bfe885.
2019-02-16 00:01:08 +08:00
wolfbeast
e88fd14de6 Restore NSS default storage file format to DBM when no prefix is given. 2019-02-16 00:01:06 +08:00
wolfbeast
608f9fca02 Update NSS to 3.35-RTM 2019-02-16 00:01:03 +08:00
Gaming4JC
d4ac94cf3e Remove support and tests for HSTS priming from the tree. Fixes #384 2019-02-15 23:59:39 +08:00
wolfbeast
b586913598 Remove MOZ_WIDGET_GONK [1/2]
Tag #288
2019-02-15 23:57:08 +08:00
wolfbeast
a0decb1dcc Nuke the sandbox 2019-02-15 23:55:43 +08:00
wolfbeast
c8462db202 Remove sandbox ductwork conditional code. 2019-02-15 23:55:41 +08:00
wolfbeast
aa9ae963f6 Remove GMP sandbox code. 2019-02-15 23:55:38 +08:00
wolfbeast
369378d566 Remove content process sandbox code. 2019-02-15 23:55:37 +08:00
janekptacijarabaci
b56d147095 Fix unsafe "instanceof" negations
https://github.com/MoonchildProductions/Pale-Moon/pull/1173
2019-02-15 23:55:28 +08:00
NTD
da15587e4a Partially revert 1ef526f0f - sftkpwd.c
#82 #265
2019-02-15 23:51:37 +08:00
wolfbeast
9e32522120 Revert "Update NSS to 3.35-RTM"
This reverts commit f1a0f0a56fdd0fc39f255174ce08c06b91c66c94.
2019-02-15 23:50:26 +08:00
janekptacijarabaci
b9ed9af662 moebius#119: (Windows) Security - Certificate Stores - NSSCertDBTrustDomain allows end-entities to be their own trust anchors
https://github.com/MoonchildProductions/moebius/pull/119
2019-02-15 23:49:14 +08:00
wolfbeast
522a346ef8 Strengthen the use of the Master Password.
- Use 30k iterations instead of 1.
- Enforce minimum password length of 8 characters.
- Adjust strength meter accordingly.

This resolves #82.
2019-02-15 23:46:38 +08:00
janekptacijarabaci
acfa05e886 moebius#126: [very minor fix] Fix typo in a comment in NSSCertDBTrustDomain.cpp
https://github.com/MoonchildProductions/moebius/pull/126
2019-02-15 23:44:07 +08:00
wolfbeast
434f3590e3 Remove base conditional code for crash reporter and injector. 2019-02-15 23:39:53 +08:00
trav90
3d90bec874 Disable -Wimplicit-fallthrough for a chromium file
GCC 7 supports the clang option -Wimplicit-fallthrough.
2019-02-15 23:35:52 +08:00
wolfbeast
b23857f77b Fix build system translation errors.
Follow-up to 11a8a39f6d2e057d51559c52c1bf0ba74bbfe189
2019-02-15 23:35:25 +08:00
janekptacijarabaci
38e95f9e35 DevTools - network - security (improvements)
https://github.com/MoonchildProductions/moebius/pull/113
https://github.com/MoonchildProductions/moebius/pull/118
https://github.com/MoonchildProductions/moebius/pull/127
2019-02-15 23:34:38 +08:00
NTD
a25b655d51 Use MOZ_FENNEC and MOZ_XULRUNNER instead of checking MOZ_BUILD_APP in most places 2019-02-15 23:34:16 +08:00
wolfbeast
66dd670b60 Update NSS to 3.35-RTM 2019-02-15 23:33:36 +08:00
wolfbeast
c91ef9012b Update NSS to 3.32.1-RTM 2019-02-15 23:29:46 +08:00
wolfbeast
504e1d12bb Disable 3DES cipher by default + re-order a few things.
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18 Add RSA-AES + SHA256/384 suites for web compatibility.
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.

Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6 Add Camellia to the active cipher suites.
Issue #4 point 1.

Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
NTD
30d5f081aa Use UTC where appropriate in python files 2019-02-14 14:28:19 +08:00
NTD
f5048f2a1d Remove kinto client, Firefox kinto storage adapter, blocklist update client and integration with sync, OneCRL and the custom time check for derives system time. 2019-02-14 14:27:06 +08:00
NTD
fe8028fa2e Add Pale Moon 2018-02-02 03:35:06 -05:00
Roy Tam
dcd9973243 import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00