[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
[tor-commits] [tor-browser] branch tor-browser-102.4.0esr-12.0-2 updated: squash! Firefox preference overrides.
This is an automated email from the git hooks/post-receive script.
richard pushed a commit to branch tor-browser-102.4.0esr-12.0-2
in repository tor-browser.
The following commit(s) were added to refs/heads/tor-browser-102.4.0esr-12.0-2 by this push:
new 46dcad9a70ad squash! Firefox preference overrides.
46dcad9a70ad is described below
commit 46dcad9a70ad2ed3785f6607e470f927da39be02
Author: Richard Pospesel <richard@xxxxxxxxxxxxxx>
AuthorDate: Wed Nov 2 20:39:17 2022 +0000
squash! Firefox preference overrides.
Bug 40183: Disable TLS ciphersuites using SHA-1
---
browser/app/profile/001-base-profile.js | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/browser/app/profile/001-base-profile.js b/browser/app/profile/001-base-profile.js
index caf2f00ad8d6..3f93614a7bbb 100644
--- a/browser/app/profile/001-base-profile.js
+++ b/browser/app/profile/001-base-profile.js
@@ -79,6 +79,18 @@ pref("dom.security.https_only_mode.upgrade_onion", false);
// [4] https://www.ssllabs.com/ssl-pulse/
pref("security.ssl.require_safe_negotiation", true);
+// Bug 40183: Disable TLS ciphersuites using SHA-1
+// https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/40183
+pref("security.ssl3.dhe_rsa_aes_128_sha", false, locked);
+pref("security.ssl3.dhe_rsa_aes_256_sha", false, locked);
+pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false, locked);
+pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false, locked);
+pref("security.ssl3.ecdhe_rsa_aes_128_sha", false, locked);
+pref("security.ssl3.ecdhe_rsa_aes_256_sha", false, locked);
+pref("security.ssl3.rsa_aes_128_sha", false, locked);
+pref("security.ssl3.rsa_aes_256_sha", false, locked);
+
+
// Misc privacy: Remote
pref("browser.send_pings", false);
pref("geo.enabled", false);
--
To stop receiving notification emails like this one, please contact
the administrator of this repository.
_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits