browser-extensions: Firefox DoH/TRR & ESNI

This commit is contained in:
Aminda Suomalainen 2019-02-28 19:42:07 +02:00
parent 2adacf4120
commit c496b04614
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67
1 changed files with 9 additions and 0 deletions

View File

@ -40,6 +40,15 @@ redirect_from:
* spoofs the user-agent as the latest Firefox ESR version.
* `intl.accept_languages` to `en-US, en`
* see above.
* `network.security.esni.enabled` to `true` in order to enable encrypted SNI.
* Requires DoH, see the next section!
#### DNS over HTTPS
* `network.trr.bootstrapAddress` DNS server to use for resolving the DoH name, e.g. `84.200.70.40` (Resolver 2 of [DNS.watch](https://dns.watch/) in Germany)
* `network.trr.mode` 3 to enforce DoH which is [required by Firefox ESNI](https://bugzilla.mozilla.org/show_bug.cgi?id=1500289#c5)
* `network.trr.early-AAAA` `true` to hopefully prefer IPv6
* `network.trr.uri` for the actual resolver address, e.g. `https://mozilla.cloudflare-dns.com/dns-query` or [check curl wiki](https://github.com/curl/curl/wiki/DNS-over-HTTPS#publicly-available-servers)
## Passwords