back
3 comments
Amazing work. But this is just a small step. You do need to block many Mozilla domains on your firewall or Pi-Hole because most of the times even Firefox does not respect your privacy.

If you reading this still use Windows, I'm sorry for you. Really. If you are using Linux, please use OpenSnitch to block this abusive pattern.

I hope these guys will add those settings to their also amazing job like:

https://github.com/arkenfox/user.js https://github.com/pyllyukko/user.js

These are config lists that I also use and it would be great to have this on those lists.

Again, thank you for your amazing work. I will apply this for LibreWolf also.

Thanks for the list, I went though it.

Some items I feel need to have some warnings.

For example, disabling OCSP: yes, it improves the privacy, but it reduces security, that should be made clear.

Also, OCSP stapling is the fix the privacy issue of OCSP, hence disabling it does not make sense here. But since „only do OCSP if OCSP stapling is supported“ does not exist as far as I can tell, it does not really matter. That would actually be the correct setting, preserving privacy while ensuring that revocation checks still happen.

another example:

disabling “media.peerconnection”. This has a serious impact on video quality for webRTC applications, that should be maybe mentioned.