Compare commits

...

3 Commits

Author SHA1 Message Date
6a9798c61b
firefox: restore prefetching
I accidentally tried it and it's just too significant performance improvement for me to keep disabled. Additionally AdNauseam is making clicks to ads anyway and I think I am still safer than someone who has no tracking protections at all.
2024-05-18 18:44:39 +03:00
2351d43020
chromium: enable prefetching and profilemanager 2024-05-18 18:24:45 +03:00
bf85d162d1
chromium policy & documentation: cleanup 2024-05-18 18:22:54 +03:00
8 changed files with 63 additions and 54 deletions

View File

@ -231,7 +231,7 @@
"StartPage": "previous-session",
"URL": "about:mozilla"
},
"NetworkPrediction": false,
"NetworkPrediction": true,
"NewTabPage": false,
"OverrideFirstRunPage": "about:mozilla",
"PDFjs": {
@ -417,19 +417,17 @@
"Value": 1
},
"network.http.speculative-parallel-limit": {
"Status": "locked",
"Type": "number",
"Value": 0
"Status": "clear"
},
"network.predictor.enabled": {
"Status": "locked",
"Type": "boolean",
"Value": false
"Value": true
},
"network.prefetch-next": {
"Status": "locked",
"Type": "boolean",
"Value": false
"Value": true
},
"network.trr.disable-ECS": {
"Status": "locked",

View File

@ -24,20 +24,27 @@
- [Privacy Badger](#privacy-badger)
- [`black-theme-colour.json.sample`](#black-theme-colourjsonsample)
- [`brave-shields-disabled.json`](#brave-shields-disabledjson)
- [`disable-brave-ipfs.json`](#disable-brave-ipfsjson)
- [`disable-brave-rewards-wallet.json`](#disable-brave-rewards-walletjson)
- [`disable-brave-tor.json`](#disable-brave-torjson)
- [`disable-brave-vpn.json`](#disable-brave-vpnjson)
- [`disable-floc.json`](#disable-flocjson)
- [`disable-incognito.json.badidea`](#disable-incognitojsonbadidea)
- [`doh-adguard-dns0.json`](#doh-adguard-dns0json)
- [`dph-adguard.json`](#dph-adguardjson)
- [`doh-adguard-unfiltered.json`](#doh-adguard-unfilteredjson)
- [`doh-cloudflare-secure.json`](#doh-cloudflare-securejson)
- [`doh-unlocked-unset.json`](#doh-unlocked-unsetjson)
- [`doh-disabled`](#doh-disabled)
- [`doh-dns0.json`](#doh-dns0json)
- [`doh-dns0-kids.json`](#doh-dns0-kidsjson)
- [`doh-dns0-open.json`](#doh-dns0-openjson)
- [`doh-dns0-zero.json`](#doh-dns0-zerojson)
- [`doh-google64.json`](#doh-google64json)
- [`doh-google.json`](#doh-googlejson)
- [`doh-mullvad-base.json`](#doh-mullvad-basejson)
- [`doh-quad9-ecs.json`](#doh-quad9-ecsjson)
- [`doh-quad9-insecure-ecs.json.badidea`](#doh-quad9-insecure-ecsjsonbadidea)
- [`doh-quad9-insecure.json.badidea`](#doh-quad9-insecurejsonbadidea)
- [`doh-quad9.json`](#doh-quad9json)
- [`doh-unlocked-unset.json`](#doh-unlocked-unsetjson-1)
- [`doh-unlocked-unset.json`](#doh-unlocked-unsetjson)
- [`edge-appsfavorites.json`](#edge-appsfavoritesjson)
- [`edge-newtabapps.json`](#edge-newtabappsjson)
- [`edge-screenshots.json`](#edge-screenshotsjson)
@ -46,9 +53,10 @@
- [`enable-passwordleakdetection.json`](#enable-passwordleakdetectionjson)
- [`enable-tab-suspend.json`](#enable-tab-suspendjson)
- [`fix-edge-search.json`](#fix-edge-searchjson)
- [`force-incognito.json.badidea`](#force-incognitojsonbadidea)
- [`generative-ai.json`](#generative-aijson)
- [`https-everywhere.json`](#https-everywherejson)
- [`prefetch.json`](#prefetchjson)
- [`profilemanager.json`](#profilemanagerjson)
- [`README.md`](#readmemd)
<!-- END doctoc generated TOC please keep comment here to allow auto update -->
@ -178,6 +186,10 @@ disabling GTK/Qt themes.
Allowlist for sites where I think Brave Shields may be breaking things. Similar is also in
`aminda-extensions.json` for Privacy Badger.
## `disable-brave-ipfs.json`
Disables Brave integrated IPFS node.
## `disable-brave-rewards-wallet.json`
Disables Brave rewards and wallet.
@ -202,24 +214,32 @@ Manifest v2 extensions (as v3 is kind of floc too).
Disables incognito mode. I don't recommend this.
## `doh-adguard-dns0.json`
## `dph-adguard.json`
## `doh-adguard-unfiltered.json`
## `doh-cloudflare-secure.json`
Sets Cloudflare with malware protection as the forced DNS-over-HTTPS server.
## `doh-unlocked-unset.json`
If no DNS over HTTPS policy is used, this unlocks the setting. Enabling managed policies disable it by default.
My other `doh-*.json` set this as well, because `secure` doesn't allow
downgrade to system resolver and Chromium seems somewhat unreliable with it often reporting
`DNS_PROBE_POSSIBLE` and while this occassionally disables ECH, it works and
my system resolvers are encrypted. I hope they will implement ECH with system
resolver soon to fix this.
## `doh-disabled`
## `doh-dns0.json`
Simply forces DNS-over-HTTPS with DNS0.eu.
## `doh-dns0-kids.json`
## `doh-dns0-open.json`
## `doh-dns0-zero.json`
## `doh-google64.json`
## `doh-google.json`
## `doh-mullvad-base.json`
Forces DNS-over-HTTPS with Mullvad Base, which features ad, malware & tracker blocking.
@ -231,16 +251,6 @@ Forces DNS-over-HTTPS with Mullvad Base, which features ad, malware & tracker bl
Forces DNS over HTTPS with Quad9 ECS enabled threat-blocking server and also contains
their alternative port.
## `doh-quad9-insecure-ecs.json.badidea`
Forces DNS over HTTPS with Quad9 ECS enabled unfiltered server and also contains
their alternative port. **No DNSSEC either.**
## `doh-quad9-insecure.json.badidea`
Forces DNS over HTTPS with Quad9 unfiltered server and also contains
their alternative port. **No DNSSEC either.**
## `doh-quad9.json`
Forces DNS over HTTPS with Quad9 threat-blocking server and also contains
@ -250,6 +260,14 @@ their alternative port.
Allows configuring DoH even with managed policies present (unless another DoH rule is in force) since enabling any managed policy will otherwise gray out the option.
If no DNS over HTTPS policy is used, this unlocks the setting. Enabling managed policies disable it by default.
My other `doh-*.json` set this as well, because `secure` doesn't allow
downgrade to system resolver and Chromium seems somewhat unreliable with it often reporting
`DNS_PROBE_POSSIBLE` and while this occassionally disables ECH, it works and
my system resolvers are encrypted. I hope they will implement ECH with system
resolver soon to fix this.
## `edge-appsfavorites.json`
Edge apps in favorites bar.
@ -284,10 +302,6 @@ Tells Microsoft Edge to redirect queries from new tab search box to URL bar
effectively forcing it to respect user configured search engine instead of
stealthily sending those queries to Bing.
## `force-incognito.json.badidea`
Forces incognito mode. I don't recommend this.
## `generative-ai.json`
Allows using the AI features that I am not seeing anyway, but won't send data
@ -304,6 +318,17 @@ This file evolved to merge another one, so now it:
- Forces HTTPS-only mode to be enabled.
- Attempts to upgrade `http://` queries to `https://`
## `prefetch.json`
Enables prefetching. Will make sites very speedy, but decreases privacy and may
conflict with uBlock Origin. However AdNauseam is already clicking those ads, so
maybe it's not that big of an issue.
## `profilemanager.json`
Forces the profile screen even with only one profile. I love the feature in Firefox
and want to see it here too, now that I accidentally noticed it.
## `README.md`
You are reading this file, are you not?

View File

@ -1,9 +0,0 @@
{
"comment": "This is a bad idea, because I don't know other DNS servers that
perform DNSSEC in addition to DNS-over-HTTPS, I just know these two do and
Quad9 doesn't. This would otherwise be the unbound.conf.d/dns-over-tls.conf
equivalent.",
"DnsOverHttpsMode": "automatic",
"DnsOverHttpsTemplates": "https://open.dns0.eu/
https://doh.applied-privacy.net/query"
}

View File

@ -1,4 +0,0 @@
{
"DnsOverHttpsMode": "automatic",
"DnsOverHttpsTemplates": "https://dns12.quad9.net/dns-query https://dns12.quad9.net:5053/dns-query"
}

View File

@ -1,4 +0,0 @@
{
"DnsOverHttpsMode": "automatic",
"DnsOverHttpsTemplates": "https://dns10.quad9.net/dns-query https://dns10.quad9.net:5053/dns-query"
}

View File

@ -1,3 +0,0 @@
{
"IncognitoModeAvailability": "Forced"
}

View File

@ -0,0 +1,3 @@
{
"NetworkPredictionOptions": 0
}

View File

@ -0,0 +1,3 @@
{
"ProfilePickerOnStartupAvailability": 2
}