mirror of
https://github.com/mikaela/mikaela.github.io/
synced 2025-08-19 11:27:24 +02:00
Compare commits
No commits in common. "edfd00bc6eaf4f6f82142667ea1d21520534702e" and "1ddb0b9f36088291a9841de9dca7cd8f1cef503f" have entirely different histories.
edfd00bc6e
...
1ddb0b9f36
@ -3,13 +3,12 @@ layout: post
|
|||||||
title: "HTTPS Everywhere through browser policy"
|
title: "HTTPS Everywhere through browser policy"
|
||||||
category: [english]
|
category: [english]
|
||||||
tags: [firefox, chromium, browsers, browser, policy]
|
tags: [firefox, chromium, browsers, browser, policy]
|
||||||
redirect_from:
|
|
||||||
- /https-everywhere.html
|
|
||||||
- /httpseverywhere.html
|
|
||||||
- /https.html
|
|
||||||
---
|
---
|
||||||
|
|
||||||
_I used to be sad since the EFF discontinued HTTPS Everywhere extension since the setting often didn't sync and it only applied to me as opposed to everyone using a shared computer. However since I have dived into browser policies, this is no longer an issue for me._
|
_I used to be sad since the EFF discontinued HTTPS Everywhere extension since
|
||||||
|
the setting often didn't sync and it only applied to me as opposed to everyone
|
||||||
|
using a shared computer. However since I have dived into browser policies,
|
||||||
|
this is no longer an issue for me._
|
||||||
|
|
||||||
I will be referring to my [shell-things](https://gitea.blesmrt.net/mikaela/shell-things/) repository a lot, particularly
|
I will be referring to my [shell-things](https://gitea.blesmrt.net/mikaela/shell-things/) repository a lot, particularly
|
||||||
`etc/`, in case the link rots in the future, chances are my git forges still
|
`etc/`, in case the link rots in the future, chances are my git forges still
|
||||||
@ -101,7 +100,7 @@ link._
|
|||||||
|
|
||||||
To put `EncryptedClientHello` simply, it will hide which domain you are
|
To put `EncryptedClientHello` simply, it will hide which domain you are
|
||||||
requesting from https capable web server, which may be serving multiple
|
requesting from https capable web server, which may be serving multiple
|
||||||
domains when DNS-Over-HTTPS is used ([Chromium restriction](https://issues.chromium.org/issues/40935452)), while
|
domains when DNS-Over-HTTPS is used (browser restriction, not ECH), while
|
||||||
generally the query for `example.net` would go in plaintext alongside _Server
|
generally the query for `example.net` would go in plaintext alongside _Server
|
||||||
Name Indication_.
|
Name Indication_.
|
||||||
|
|
||||||
@ -149,7 +148,7 @@ Firefox is a bit more complicated in the sense that everything belongs to one
|
|||||||
`policies.json` file, so there is no separating different policies to
|
`policies.json` file, so there is no separating different policies to
|
||||||
different files _and_ there is no direct policy for HTTPS-only mode.
|
different files _and_ there is no direct policy for HTTPS-only mode.
|
||||||
|
|
||||||
_**WARNING for [LibreAwoo](https://librewolf.net/) users**_! [This will mask LibreAwoo's policy](https://codeberg.org/librewolf/issues/issues/1767)
|
_**WARNING for [LibreAwoo](https://librewolf.net/) users**_! [This will mask LibreWolf's policy](https://codeberg.org/librewolf/issues/issues/1767)
|
||||||
(`/usr/share/librewolf/distribution/policies.json`,
|
(`/usr/share/librewolf/distribution/policies.json`,
|
||||||
[codeberg](https://codeberg.org/librewolf/settings/src/branch/master/distribution/policies.json)),
|
[codeberg](https://codeberg.org/librewolf/settings/src/branch/master/distribution/policies.json)),
|
||||||
so make sure to copy the parts you wish to use before applying this (although
|
so make sure to copy the parts you wish to use before applying this (although
|
||||||
@ -249,13 +248,9 @@ values.
|
|||||||
- Which URL is used for queries? I am under impression that unlike with
|
- Which URL is used for queries? I am under impression that unlike with
|
||||||
Chromium, multiple addresses aren't allowed here.
|
Chromium, multiple addresses aren't allowed here.
|
||||||
|
|
||||||
_Have you seen a note about temptation to write about IPv6 here? Perhaps you
|
_I have a temptation to also write about preferring IPv6 connections through
|
||||||
are looking for `network.dns.preferIPv6` and `network.trr.early-AAAA`?_
|
DoH in Firefox, but that would be even more off-topic and this page already
|
||||||
|
provides all the examples and links interested reader would need for that._
|
||||||
**Updated note on Firefox ECH:** DNS-Over-HTTPS is no longer required for ECH,
|
|
||||||
since `network.dns.native_https_query` exists (if you aren't using ESR
|
|
||||||
branch on version 115). You should already know how to enable it if you have
|
|
||||||
read this far 😼
|
|
||||||
|
|
||||||
## Documentation and other policies
|
## Documentation and other policies
|
||||||
|
|
||||||
|
Loading…
x
Reference in New Issue
Block a user