36 lines
2.2 KiB
Nix
36 lines
2.2 KiB
Nix
{
|
|
/*** [SECTION 0900]: PASSWORDS ***/
|
|
/* 0901: disable saving passwords
|
|
* [NOTE] This does not clear any passwords already saved
|
|
* [SETTING] Privacy & Security>Logins and Passwords>Ask to save logins and passwords for websites ***/
|
|
# // user_pref("signon.rememberSignons", false);
|
|
/* 0902: use a primary password
|
|
* There are no preferences for this. It is all handled internally.
|
|
* [SETTING] Privacy & Security>Logins and Passwords>Use a Primary Password
|
|
* [1] https://support.mozilla.org/kb/use-primary-password-protect-stored-logins-and-pas ***/
|
|
/* 0903: set how often Firefox should ask for the primary password
|
|
* 0=the first time (default), 1=every time it's needed, 2=every n minutes (see 0904) ***/
|
|
"security.ask_for_password" = 2;
|
|
/* 0904: set how often in minutes Firefox should ask for the primary password (see 0903)
|
|
* in minutes, default is 30 ***/
|
|
"security.password_lifetime" = 5;
|
|
/* 0905: disable auto-filling username & password form fields
|
|
* can leak in cross-site forms *and* be spoofed
|
|
* [NOTE] Username & password is still available when you enter the field
|
|
* [SETTING] Privacy & Security>Logins and Passwords>Autofill logins and passwords
|
|
* [1] https://freedom-to-tinker.com/2017/12/27/no-boundaries-for-user-identities-web-trackers-exploit-browser-login-managers/ ***/
|
|
"signon.autofillForms" = false;
|
|
/* 0909: disable formless login capture for Password Manager [FF51+] ***/
|
|
"signon.formlessCapture.enabled" = false;
|
|
/* 0912: limit (or disable) HTTP authentication credentials dialogs triggered by sub-resources [FF41+]
|
|
* hardens against potential credentials phishing
|
|
* 0=don't allow sub-resources to open HTTP authentication credentials dialogs
|
|
* 1=don't allow cross-origin sub-resources to open HTTP authentication credentials dialogs
|
|
* 2=allow sub-resources to open HTTP authentication credentials dialogs (default) ***/
|
|
"network.auth.subresource-http-auth-allow" = 1;
|
|
/* 0913: disable automatic authentication on Microsoft sites [FF91+] [WINDOWS 10+]
|
|
* [SETTING] Privacy & Security>Logins and Passwords>Allow Windows single sign-on for...
|
|
* [1] https://support.mozilla.org/kb/windows-sso ***/
|
|
"network.http.windows-sso.enabled" = false;
|
|
}
|