firefox: remove HTTPS Everywhere addon, replace by builtin config

1 files changed, 5 insertions, 1 deletions

diff --git a/usecases/desktop/graphical/firefox.nix b/usecases/desktop/graphical/firefox.nix
index 3d6362b..0284dfc 100644
--- a/usecases/desktop/graphical/firefox.nix
+++ b/usecases/desktop/graphical/firefox.nix
@@ -31,7 +31,6 @@ inputs:
 
         extensions = with pkgs.firefox-addons; [
           # Security
-          https-everywhere
           browserpass
 
           # Privacy
@@ -132,6 +131,11 @@ inputs:
             "security.ssl.treat_unsafe_negotiation_as_broken" = true;
             "network.security.esni.enabled" = true;
 
+            # HTTPS everywhere
+            "dom.security.https_only_mode" = true;
+            "dom.security.https_only_mode_ever_enabled" = true;
+            "dom.security.https_only_mode_ever_enabled_pbm" = true;
+
             # == General web privacy ==
 
             "beacon.enabled" = false;