Increase minimum TLS version to TLS 1.2

This is in line with ghacksuserjs's current recommendation.
This commit is contained in:
Shreyas Minocha 2020-06-29 15:27:10 +05:30
parent cb6b223ec8
commit c4d7cbf4ee
No known key found for this signature in database
GPG key ID: 3740FE9FC5772203

View file

@ -1255,10 +1255,11 @@ defaultPref("network.dns.localDomains", "librefox.com");
// https://github.com/pyllyukko/user.js/pull/206#issuecomment-280229645 // https://github.com/pyllyukko/user.js/pull/206#issuecomment-280229645
lockPref("security.tls.version.fallback-limit", 3); lockPref("security.tls.version.fallback-limit", 3);
// Pref : Only allow TLS 1.[0-3] // Pref : Only allow TLS 1.2+
// http://kb.mozillazine.org/Security.tls.version.* // http://kb.mozillazine.org/Security.tls.version.*
lockPref("security.tls.version.min", 2); lockPref("security.tls.version.min", 3);
// enforce TLS 1.0 and 1.1 downgrades as session only
lockPref("security.tls.version.enable-deprecated", false); lockPref("security.tls.version.enable-deprecated", false);
// Pref : Enfore Public Key Pinning // Pref : Enfore Public Key Pinning