commit 18dbb56a3d143a97dc2f78e0cf63c4565c16db33
parent cc8674c16de021bc4efeb9c714a8ffe09c3dc8c5
Author: Thorin-Oakenpants <Thorin-Oakenpants@users.noreply.github.com>
Date: Sat, 24 Jul 2021 12:51:15 +0000
put 1203 back
see https://github.com/arkenfox/user.js/commit/3bb9fc713f141d794fc4adfb38d3fcf86c9307ab
Diffstat:
1 file changed, 2 insertions(+), 0 deletions(-)
diff --git a/user.js b/user.js
@@ -645,6 +645,8 @@ user_pref("security.ssl.require_safe_negotiation", true);
* [1] https://www.ssllabs.com/ssl-pulse/ ***/
// user_pref("security.tls.version.min", 3); // [DEFAULT: 3]
// user_pref("security.tls.version.max", 4);
+/* 1203: enforce TLS 1.0 and 1.1 downgrades as session only ***/
+user_pref("security.tls.version.enable-deprecated", false);
/* 1204: disable SSL session tracking [FF36+]
* SSL Session IDs are unique and last up to 24hrs in Firefox (or longer with prolongation attacks)
* [NOTE] These are not used in PB mode. In normal windows they are isolated when using FPI (4001)