Firefox 57: an overview of what's new (with resources)

Brummelchen · Feb 4, 2018

this is also possible with current builds
https://wiki.mozilla.org/Security/Referrer

network.http.referer.XOriginTrimmingPolicy

controls how much referrer to send across origins

values:

0 = (default) send the full URL

1 = send the URL without its query string

2 = only send the origin

Click to expand...

network.http.referer.trimmingPolicy

controls how much referrer to send regardless of origin

values:

0 = (default) send the full URL

1 = send the URL without its query string

2 = only send the origin

Click to expand...

and optional

network.http.referer.XOriginPolicy

controls whether or not to send a referrer across origins

values:

0 = (default) send the referrer in all cases

1 = send a referrer only when the base domains are the same

2 = send a referrer only on same-origin

Click to expand...

new in firefox 59
network.http.referer.defaultPolicy;3
network.http.referer.defaultPolicy.pbmode;2

Minimalist · Feb 4, 2018

Yep. Still nice to see that they will tweak it in incognito mode by default for all users.

guest · Apr 4, 2018

HTTPS Everywhere: ruleset updating without extension updates
A new version of the HTTPS Everywhere browser extension introduces a new feature that separates ruleset updates from extension updates.
April 04, 2018
https://www.ghacks.net/2018/04/04/https-everywhere-ruleset-updating-without-extension-updates/

Previously, the Electronic Frontier Foundation, makers of HTTPS Everywhere, had to release a new version of the extension whenever it wanted to distribute a new ruleset file. Even if the extension itself did not change at all, it had to be updated to distribute the new ruleset to all installations.

The new system separates extension updates from ruleset updates similarly to how content blocker handle updating content blocking lists.

HTTPS Everywhere checks for ruleset updates periodically and downloads them if updates are available. Rulesets are signed by the EFF and verified using the Web Crypto API to make sure that they are legitimate before they are updated in the browser.

The initial version of the feature transfers the entire ruleset file to the browser when updates happen. The EFF plans to improve the functionality so that only the changes between editions are transferred and not the entire ruleset file.
Click to expand...

BoerenkoolMetWorst · Apr 6, 2018

mood said: ↑

HTTPS Everywhere: ruleset updating without extension updates
A new version of the HTTPS Everywhere browser extension introduces a new feature that separates ruleset updates from extension updates.
April 04, 2018
https://www.ghacks.net/2018/04/04/https-everywhere-ruleset-updating-without-extension-updates/
Click to expand...

Also interesting regarding other addons such as Smart HTTPS which don't use a ruleset:

Why go through all this trouble to maintain a list of sites supporting HTTPS, instead of just defaulting to HTTPS? Because a lot of sites still only offer HTTP. Without knowing that a site supports HTTPS, we'd have to try HTTPS first, and then downgrade your connection if it's not available. And for a network attacker, it's easy to fake the browser into thinking that a site does not offer HTTPS. That's why downgrading connections can be dangerous - you can fall right into the trap of an attacker. HTTPS Everywhere forces your browser to use the secure endpoint if it's on our list, thus ensuring that you'll have the highest level of security available for these sites.
Click to expand...

https://www.eff.org/deeplinks/2018/...roduces-new-feature-continual-ruleset-updates

paulderdash · Apr 7, 2018

BoerenkoolMetWorst said: ↑

Also interesting regarding other addons such as Smart HTTPS which don't use a ruleset:

https://www.eff.org/deeplinks/2018/...roduces-new-feature-continual-ruleset-updates
Click to expand...

BMW, that is interesting .

@summerheat, we had discussed this before. I am switching back to HTTPS Everywhere ...

ronjor · Apr 11, 2018

Several posts moved to addons thread starting here: https://www.wilderssecurity.com/threads/firefox-addons.396377/page-5#post-2750479

Rasheed187 · Apr 22, 2018

mood said: ↑

https://www.ghacks.net/2018/04/04/https-everywhere-ruleset-updating-without-extension-updates/
Click to expand...

I just wanted to say that the new Firefox Quantum has been a total disaster for me. It's just as crappy as Chrome, with no option to put tabs on bottom, to close tabs via double click, and the same non-tab based crappy bookmarks manager. The only good thing is the super fast engine, which is useless to me without the already mentioned and some other features. Thanks a lot Mozilla!

Log in or Sign up

Firefox 57: an overview of what's new (with resources)

Brummelchen Registered Member

Minimalist Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

paulderdash Registered Member

ronjor Global Moderator

Rasheed187 Registered Member

Log in or Sign up

Firefox 57: an overview of what's new (with resources)

Brummelchen Registered Member

Minimalist Registered Member

guest Guest

BoerenkoolMetWorst Registered Member

paulderdash Registered Member

ronjor Global Moderator

Rasheed187 Registered Member

Useful Searches