4 ms·
Some observations: * Disabling all referers everywhere will cause difficulties accessing sites that use it to prevent hotlinking (usually image/video hosts, ma
by Karunamon 10y ago
Some observations:
* Disabling all referers everywhere will cause difficulties accessing sites that use it to prevent hotlinking (usually image/video hosts, many blogs)
* Enabling "Do not track" concedes a lot of trust to the advertisers, and also serves to differentiate you as most people have it turned off.
* Disabling Javascript will break mostly everything, everywhere, and also serves to differentiate you. It's also of questionable use since we're already installing noscript.
* I'm not sure what color profile support has to do with security hardening
* Disabling IPV6? Really?
- lucideer 10y agoI would argue the downside of being distinguished by having js disabled or dnt enabled are not significant but noscript/μblock/requestpolicy definitely mitigates a lot of what both of these would do. Also, installing all three of those addons it not advisable. The ipv6 and colour profiles seem like accidental inclusions surely... unless there's some mysterious unmentioned logic.
- nextweek2 10y ago> * Disabling IPV6? Really? From what I have read about the slow roll-out of IPv6 is because network operators just don't know how people are going to exploit the expanded address space. Email spam is a good example. With a server on IPv6 I get a block of addresses which means I can email out from any of a literally thousands of addresses. Email servers need to be coded to be able to blacklist that block rather than a single address. Where ever blacklists are used they've really got to be adapted for groups of addresses. The question is can you be sure Firefox has catered for all security concerns surrounding a new technology? If you are producing a security product, you don't use the latest and greatest technology.