trav90
2bce502df7
Update HSTS preload list
...
Tag #447
2019-02-16 00:15:49 +08:00
wolfbeast
55c45dc7f2
Ensure we got an nsISSLStatus when deserializing in TransportSecurityInfo.
2019-02-16 00:15:09 +08:00
trav90
c576139ef2
Update HSTS preload list
...
Tag #447
2019-02-16 00:14:42 +08:00
wolfbeast
bd525435bf
Get rid of the incorrect mechanism to remove insecure fallback hosts.
...
This fixes #797 .
2019-02-16 00:14:39 +08:00
trav90
4f41aebb67
Update HSTS preload list
...
Tag #447
2019-02-16 00:13:42 +08:00
wolfbeast
8c8145e620
Remove all C++ Telemetry Accumulation calls.
...
This creates a number of stubs and leaves some surrounding code that may be irrelevant (eg. recorded time stamps, status variables).
Stub resolution/removal should be a follow-up to this.
2019-02-16 00:12:32 +08:00
wolfbeast
e2e197cada
Remove support for TLS session caches in TLSServerSocket.
...
This resolves #738
2019-02-16 00:12:22 +08:00
trav90
450c242d9f
Update HSTS preload list
...
Tag #447
2019-02-16 00:12:12 +08:00
wolfbeast
4debc9246e
Fix missed in32->int64 in df852120098dc7ba5df4a76126c6297c6d2d1b7b
...
Tag #709 .
2019-02-16 00:11:26 +08:00
wolfbeast
8effb3030e
Reinstate RC4 and mark 3DES weak.
...
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast
7f72783c00
Extend {EnabledWeakCiphers} bit field to allow more cipher suites.
...
Tag #709 .
2019-02-16 00:11:23 +08:00
trav90
b266e5e349
Update HSTS preload list
...
Tag #447
2019-02-16 00:10:17 +08:00
yami
4470fb65f3
replace "certErrorCodePrefix2" with "certErrorCodePrefix"
2019-02-16 00:09:37 +08:00
trav90
d8992204e1
Update HSTS preload list
...
Tag #447
2019-02-16 00:08:57 +08:00
wolfbeast
7b82a2ece4
Remove SSL Error Reporting telemetry
2019-02-16 00:06:16 +08:00
trav90
a179019413
Update HSTS preload list
...
Tag #447
2019-02-16 00:03:49 +08:00
wolfbeast
624aa2c581
Fix SSL status ambiguity.
...
- Adds CipherSuite string with the full suite
- Changes CipherName to be the actual cipher name instead of the (erroneous) full suite like Firefox does.
2019-02-16 00:03:48 +08:00
trav90
0c4e5ff00d
Regenerate the HSTS preload list
2019-02-16 00:01:48 +08:00
trav90
70b28bf2ee
Restore clearly-delimited format for the HSTS preload list
2019-02-16 00:01:46 +08:00
JustOff
7ff80ee648
Request NSS to use DBM as the storage file format
2019-02-16 00:01:09 +08:00
Gaming4JC
d4ac94cf3e
Remove support and tests for HSTS priming from the tree. Fixes #384
2019-02-15 23:59:39 +08:00
janekptacijarabaci
b9ed9af662
moebius#119: (Windows) Security - Certificate Stores - NSSCertDBTrustDomain allows end-entities to be their own trust anchors
...
https://github.com/MoonchildProductions/moebius/pull/119
2019-02-15 23:49:14 +08:00
janekptacijarabaci
38e95f9e35
DevTools - network - security (improvements)
...
https://github.com/MoonchildProductions/moebius/pull/113
https://github.com/MoonchildProductions/moebius/pull/118
https://github.com/MoonchildProductions/moebius/pull/127
2019-02-15 23:34:38 +08:00
wolfbeast
504e1d12bb
Disable 3DES cipher by default + re-order a few things.
...
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18
Add RSA-AES + SHA256/384 suites for web compatibility.
...
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.
Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6
Add Camellia to the active cipher suites.
...
Issue #4 point 1.
Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
NTD
f5048f2a1d
Remove kinto client, Firefox kinto storage adapter, blocklist update client and integration with sync, OneCRL and the custom time check for derives system time.
2019-02-14 14:27:06 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00
