Commit graph

16 commits

Author SHA1 Message Date
Moonchild
eaf9e756a0 Issue #21 - Remove remaining telemetry structs, callers and flags. 2022-04-28 10:33:44 +08:00
Moonchild
d4eac725fd Issue #1877 - Resolve RELEASE_OR_BETA conditionals. 2022-04-21 21:46:47 +08:00
wolfbeast
cf5f069080 Issue #1280 - Part 1: Remove HPKP components.
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
e7ab106190 Issue #1289 - Part 1: Add a pref to disable HPKP header processing. 2019-11-15 14:24:03 +08:00
wolfbeast
f8d473c3c9 Remove unused SSL errorReporting prefs
Resolves #1003.
2019-03-16 07:02:44 +08:00
wolfbeast
8797f07375 Expose TLS 1.3 cipher suite prefs. 2019-02-16 00:28:17 +08:00
wolfbeast
8effb3030e Reinstate RC4 and mark 3DES weak.
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast
155cee3aae Revert "Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec."
This reverts commit 6c3f95480a191ce432ddfb2aa400a6d70c4884a8.
2019-02-16 00:01:11 +08:00
wolfbeast
fdf7ba29b4 Fix sec pref locations and enable HPKP checking by default.
Some prefs were incorrectly in all.js (ocsp and hpkp)
2019-02-15 23:59:35 +08:00
wolfbeast
63045af8a2 Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec. 2019-02-15 23:50:30 +08:00
wolfbeast
43fe9261ea Activate TLS 1.3 by default.
This resolves #15.
2019-02-15 23:33:55 +08:00
wolfbeast
fbac02fc06 Disable static DHE + AES suites by default (common combination for weak DH keys)
Issue #4 point 5
2019-02-14 14:28:32 +08:00
wolfbeast
504e1d12bb Disable 3DES cipher by default + re-order a few things.
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18 Add RSA-AES + SHA256/384 suites for web compatibility.
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.

Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6 Add Camellia to the active cipher suites.
Issue #4 point 1.

Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
Roy Tam
dcd9973243 import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo 2018-01-19 03:59:58 +08:00