From 3f9651276abbd1a72cfb2248daf9150ca82c8bd5 Mon Sep 17 00:00:00 2001 From: Minijackson Date: Thu, 12 Jan 2023 19:01:28 +0100 Subject: firefox: remove HTTPS Everywhere addon, replace by builtin config --- usecases/desktop/graphical/firefox.nix | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/usecases/desktop/graphical/firefox.nix b/usecases/desktop/graphical/firefox.nix index 3d6362b..0284dfc 100644 --- a/usecases/desktop/graphical/firefox.nix +++ b/usecases/desktop/graphical/firefox.nix @@ -31,7 +31,6 @@ inputs: extensions = with pkgs.firefox-addons; [ # Security - https-everywhere browserpass # Privacy @@ -132,6 +131,11 @@ inputs: "security.ssl.treat_unsafe_negotiation_as_broken" = true; "network.security.esni.enabled" = true; + # HTTPS everywhere + "dom.security.https_only_mode" = true; + "dom.security.https_only_mode_ever_enabled" = true; + "dom.security.https_only_mode_ever_enabled_pbm" = true; + # == General web privacy == "beacon.enabled" = false; -- cgit v1.2.3