From 833ebf5bc2c69fc60667667a82d07df3f1c093c3 Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Tue, 10 May 2022 14:06:00 +0000 Subject: [PATCH] fixup crlite mode default --- user.js | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/user.js b/user.js index b9f6143..df7b372 100644 --- a/user.js +++ b/user.js @@ -515,9 +515,9 @@ user_pref("security.family_safety.mode", 0); user_pref("security.cert_pinning.enforcement_level", 2); /* 1224: enable CRLite [FF73+] * 0 = disabled - * 1 = consult CRLite but only collect telemetry (default) + * 1 = consult CRLite but only collect telemetry * 2 = consult CRLite and enforce both "Revoked" and "Not Revoked" results - * 3 = consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked" (FF99+) + * 3 = consult CRLite and enforce "Not Revoked" results, but defer to OCSP for "Revoked" (FF99+, default FF100+) * [1] https://bugzilla.mozilla.org/buglist.cgi?bug_id=1429800,1670985,1753071 * [2] https://blog.mozilla.org/security/tag/crlite/ ***/ user_pref("security.remote_settings.crlite_filters.enabled", true);