roytam1
6414271c91
Merge remote-tracking branch 'origin/tracking' into custom
2025-06-17 09:32:50 +08:00
Moonchild
5960178802
Issue #2723 - Remove obsolete NPN prefs and callbacks.
...
NPN was removed from NSS a long time ago, this effectively does nothing.
ALPN also should be default-enabled (we do this by pref but the component
itself should have a sane default) so this was flipped as a drive-by fix.
Resolves #2723
2025-06-17 09:29:57 +08:00
roytam1
ead737cb49
Merge remote-tracking branch 'origin/tracking' into custom
2023-03-29 11:07:18 +08:00
Moonchild
dc4bf9b823
Issue #2180 - Add pref to control NSS TLS 1.3 protocol downgrade sentinel
2023-03-29 11:05:16 +08:00
Moonchild
ca93d4b42d
Issue #1831 - Add an option to enable TLS 1.3 "compatibility" mode.
...
Critical note: this potentially reduces the strength of TLS 1.3 and
should only be enabled if absolutely necessary to access a site.
A browser restart is required for the pref change to take effect as it
is set on NSS initialization.
Resolves #1831
2023-03-29 11:04:44 +08:00
roytam1
8f801c5c31
turn on TLS_RSA_WITH_AES_128_GCM_SHA256 to fix download from mega
2023-01-07 07:40:29 +08:00
Moonchild
eaf9e756a0
Issue #21 - Remove remaining telemetry structs, callers and flags.
2022-04-28 10:33:44 +08:00
Moonchild
d4eac725fd
Issue #1877 - Resolve RELEASE_OR_BETA conditionals.
2022-04-21 21:46:47 +08:00
wolfbeast
cf5f069080
Issue #1280 - Part 1: Remove HPKP components.
...
This also removes leftover plumbing for storing preload information
in SiteSecurityService since no service still uses it.
2020-04-03 09:27:11 +08:00
wolfbeast
e7ab106190
Issue #1289 - Part 1: Add a pref to disable HPKP header processing.
2019-11-15 14:24:03 +08:00
wolfbeast
f8d473c3c9
Remove unused SSL errorReporting prefs
...
Resolves #1003 .
2019-03-16 07:02:44 +08:00
wolfbeast
8797f07375
Expose TLS 1.3 cipher suite prefs.
2019-02-16 00:28:17 +08:00
wolfbeast
8effb3030e
Reinstate RC4 and mark 3DES weak.
...
Tag #709
2019-02-16 00:11:24 +08:00
wolfbeast
155cee3aae
Revert "Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec."
...
This reverts commit 6c3f95480a191ce432ddfb2aa400a6d70c4884a8.
2019-02-16 00:01:11 +08:00
wolfbeast
fdf7ba29b4
Fix sec pref locations and enable HPKP checking by default.
...
Some prefs were incorrectly in all.js (ocsp and hpkp)
2019-02-15 23:59:35 +08:00
wolfbeast
63045af8a2
Disable TLS 1.3 by default for now until our NSS can be updated to the latest spec.
2019-02-15 23:50:30 +08:00
wolfbeast
43fe9261ea
Activate TLS 1.3 by default.
...
This resolves #15 .
2019-02-15 23:33:55 +08:00
wolfbeast
fbac02fc06
Disable static DHE + AES suites by default (common combination for weak DH keys)
...
Issue #4 point 5
2019-02-14 14:28:32 +08:00
wolfbeast
504e1d12bb
Disable 3DES cipher by default + re-order a few things.
...
Issue #4 point 4
2019-02-14 14:28:30 +08:00
wolfbeast
05d35d3d18
Add RSA-AES + SHA256/384 suites for web compatibility.
...
Sites with these ciphers (commonly IIS) would otherwise fall back to weak 3DES that will be disabled by default.
Issue #4 points 2 and 3
2019-02-14 14:28:29 +08:00
wolfbeast
3ecea693f6
Add Camellia to the active cipher suites.
...
Issue #4 point 1.
Camellia is a strong, modern, safe cipher with no known weaknesses or reduced strength attacks.
The cipher has been approved for use by the ISO/IEC, the European Union's NESSIE project and the Japanese CRYPTREC project.
2019-02-14 14:28:27 +08:00
Roy Tam
dcd9973243
import FIREFOX_52_6_0esr_RELEASE from mozilla-esr52 hg repo
2018-01-19 03:59:58 +08:00
