Comments (6)
Firefox 52 is the new ESR - in which the LAN IP address leak is fixed. So we should either:
- comment out the pref disabling WebRTC (
media.peerconnection.enabled
) - leave it as is for hardening purposes, and close this issue
- if notable functionality breakage is found due to WebRTC being disabled, add a
NOTICE:
field alongside that pref.
from user.js.
media.peerconnection.ice.default_address_only
should also be removed since the way to disable the leaking of internal IP addresses is media.peerconnection.ice.no_host
in Firefox >= 52.
from user.js.
@fmarier media.peerconnection.ice.no_host
is already present (https://github.com/pyllyukko/user.js/blob/master/user.js#L61)
media.peerconnection.ice.default_address_only
is there for legacy reasons (with a clear indicator that this is for firefox < 51).
Or should we remove all prefs for versions older than the current ESR? (whole other issue)
from user.js.
leave it as is for hardening purposes, and close this issue
I would say we keep it disabled for now and revisit this issue a bit later.
if notable functionality breakage is found due to WebRTC being disabled, add a NOTICE: field alongside that pref.
Of course.
@fmarier media.peerconnection.ice.no_host is already present (https://github.com/pyllyukko/user.js/blob/master/user.js#L61)
The comment in user.js says Firefox >= 51
and @fmarier said it's Firefox >= 52
...
media.peerconnection.ice.default_address_only is there for legacy reasons (with a clear indicator that this is for firefox < 51).
Yep.
Or should we remove all prefs for versions older than the current ESR? (whole other issue)
No. At least not yet, as ESR 52 is just out of the oven and some distros are still using ESR 45.*.
from user.js.
No. At least not yet, as ESR 52 is just out of the oven and some distros are still using ESR 45.*.
The comment in user.js says Firefox >= 51 and @fmarier said it's Firefox >= 52...
Yes, this should be clarified. @fmarier is probably right, will edit the comment.
I will amend #249 to re-disable WebRTC. If there are not other points to discuss I think this issue can be closed (changes like this can be tracked in #251)
from user.js.
WebRTC was re-enabled in 9763829, then re-disabled in ac1a818. This issue should be reopened.
- Disabling WebRTC is not needed in Firefox > 52 (Related #251)
- WebRTC would be worth re-enabling in a "relaxed" variant (Related #231)
from user.js.
Related Issues (20)
- Repeat PREF 4520 4614 HOT 3
- Can't change useragent HOT 2
- Segmentation fault on OpenBSD HOT 1
- user.js+noscript HOT 1
- Certain SSL prefs less secure than current Firefox defaults. HOT 1
- Settings will fall back to systemwide_user.js after firefox restart
- privacy.resistfingerprinting not overwriteable HOT 1
- Investigate use of the `sticky` flag on prefs HOT 5
- webgl.disabled can block some website data HOT 1
- Extensions don't show up HOT 4
- How to restore urlbar behaviour? HOT 1
- When connecting with VPN: Secure Connection Failed
- OpenSCAPin profiili Upstream Firefox STIG
- Exceptions for Enhanced Tracking Protection not working HOT 1
- Recommendation to support uBlock Origin "Back up to file"? HOT 1
- set `browser.sessionstore.max_tabs_undo = 0` HOT 3
- set `network.http.referer.trimmingPolicy = 2`/`network.http.referer.XOriginTrimmingPolicy = 2` HOT 2
- Investigate preferences set by ffprofile.com
- How to block outgoing connection to assets.mozilla.net? HOT 3
- Hows guys You like that
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from user.js.