trav90
0c4e5ff00d
Regenerate the HSTS preload list
2019-02-16 00:01:48 +08:00
trav90
70b28bf2ee
Restore clearly-delimited format for the HSTS preload list
2019-02-16 00:01:46 +08:00
trav90
e8d7388622
Increase concurrent lookups to 15 when generating HSTS preload list
2019-02-16 00:01:45 +08:00
trav90
4752033ff0
Update HSTS preload list generation script
...
Previous behavior: if an entry was in the previously-used list, and there would be an error connecting to or processing the host, it would adopt it using the previous status, with a new minimum required max age TTL.
New behavior: if an entry is in the previously-used list, and there is an error connecting to or processing the host, it will be dropped from the preload list.
The old behavior would allow entries to persist on the HSTS preload list when they drop off the 'net. Considering domain churn, it would cause issues for new owners for having a persisted HSTS entry preloaded in the browser.
Bonus: it keeps our HSTS preload list lean.
2019-02-16 00:01:43 +08:00
JustOff
7ff80ee648
Request NSS to use DBM as the storage file format
2019-02-16 00:01:09 +08:00
wolfbeast
8c296a9714
Revert "Restore NSS default storage file format to DBM when no prefix is given."
...
This reverts commit b2c78bbf83f75bf034028814329fdd43b6bfe885.
2019-02-16 00:01:08 +08:00
wolfbeast
e88fd14de6
Restore NSS default storage file format to DBM when no prefix is given.
2019-02-16 00:01:06 +08:00
wolfbeast
608f9fca02
Update NSS to 3.35-RTM
2019-02-16 00:01:03 +08:00
Gaming4JC
d4ac94cf3e
Remove support and tests for HSTS priming from the tree. Fixes #384
2019-02-15 23:59:39 +08:00
wolfbeast
b586913598
Remove MOZ_WIDGET_GONK [1/2]
...
Tag #288
2019-02-15 23:57:08 +08:00
wolfbeast
a0decb1dcc
Nuke the sandbox
2019-02-15 23:55:43 +08:00
wolfbeast
c8462db202
Remove sandbox ductwork conditional code.
2019-02-15 23:55:41 +08:00
wolfbeast
aa9ae963f6
Remove GMP sandbox code.
2019-02-15 23:55:38 +08:00
wolfbeast
369378d566
Remove content process sandbox code.
2019-02-15 23:55:37 +08:00
janekptacijarabaci
b56d147095
Fix unsafe "instanceof" negations
...
https://github.com/MoonchildProductions/Pale-Moon/pull/1173
2019-02-15 23:55:28 +08:00
NTD
da15587e4a
Partially revert 1ef526f0f - sftkpwd.c
...
#82 #265
2019-02-15 23:51:37 +08:00
wolfbeast
9e32522120
Revert "Update NSS to 3.35-RTM"
...
This reverts commit f1a0f0a56fdd0fc39f255174ce08c06b91c66c94.
2019-02-15 23:50:26 +08:00
janekptacijarabaci
b9ed9af662
moebius#119: (Windows) Security - Certificate Stores - NSSCertDBTrustDomain allows end-entities to be their own trust anchors
...
https://github.com/MoonchildProductions/moebius/pull/119
2019-02-15 23:49:14 +08:00
wolfbeast
522a346ef8
Strengthen the use of the Master Password.
...
- Use 30k iterations instead of 1.
- Enforce minimum password length of 8 characters.
- Adjust strength meter accordingly.
This resolves #82 .
2019-02-15 23:46:38 +08:00
janekptacijarabaci
acfa05e886
moebius#126: [very minor fix] Fix typo in a comment in NSSCertDBTrustDomain.cpp
...
https://github.com/MoonchildProductions/moebius/pull/126
2019-02-15 23:44:07 +08:00
wolfbeast
434f3590e3
Remove base conditional code for crash reporter and injector.
2019-02-15 23:39:53 +08:00
trav90
3d90bec874
Disable -Wimplicit-fallthrough for a chromium file
...
GCC 7 supports the clang option -Wimplicit-fallthrough.
2019-02-15 23:35:52 +08:00
wolfbeast
b23857f77b
Fix build system translation errors.
...
Follow-up to 11a8a39f6d2e057d51559c52c1bf0ba74bbfe189
2019-02-15 23:35:25 +08:00
janekptacijarabaci
38e95f9e35
DevTools - network - security (improvements)
...
https://github.com/MoonchildProductions/moebius/pull/113
https://github.com/MoonchildProductions/moebius/pull/118
https://github.com/MoonchildProductions/moebius/pull/127
2019-02-15 23:34:38 +08:00
NTD
a25b655d51
Use MOZ_FENNEC and MOZ_XULRUNNER instead of checking MOZ_BUILD_APP in most places
2019-02-15 23:34:16 +08:00
wolfbeast
66dd670b60
Update NSS to 3.35-RTM
2019-02-15 23:33:36 +08:00
wolfbeast
c91ef9012b
Update NSS to 3.32.1-RTM
2019-02-15 23:29:46 +08:00
wolfbeast
504e1d12bb
Disable 3DES cipher by default + re-order a few things.
...
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18
Add RSA-AES + SHA256/384 suites for web compatibility.
...
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.
Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6
Add Camellia to the active cipher suites.
...
Issue #4 point 1.
Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
NTD
30d5f081aa
Use UTC where appropriate in python files
2019-02-14 14:28:19 +08:00
NTD
f5048f2a1d
Remove kinto client, Firefox kinto storage adapter, blocklist update client and integration with sync, OneCRL and the custom time check for derives system time.
2019-02-14 14:27:06 +08:00
NTD
fe8028fa2e
Add Pale Moon
2018-02-02 03:35:06 -05:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00