search

arkenfox / user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
MIT License
10.24k stars 518 forks source link

ToDo: diffs FF73-FF74 #900

Closed earthlng closed 4 years ago

earthlng commented 4 years ago

FF74 is scheduled for release Mar. 10th

FF74 release notes [when ready] FF74 for developers FF74 compatibility FF74 security advisories

72 diffs ( 46 new, 11 gone, 15 different )

new in v74.0:

removed, renamed or hidden in v74.0:

changed in v74.0:

ignore

click me for details

==NEW ```js pref("apz.touch_acceleration_factor_x", "1.0"); pref("apz.touch_acceleration_factor_y", "1.0"); pref("browser.newtabpage.activity-stream.discoverystream.personalization.modelKeys", "nb_model_arts_and_entertainment, nb_model_autos_and_vehicles, nb_model_beauty_and_fitness, nb_model_blogging_resources_and_services, nb_model_books_and_literature, nb_model_business_and_industrial, nb_model_computers_and_electronics, nb_model_finance, nb_model_food_and_drink, nb_model_games, nb_model_health, nb_model_hobbies_and_leisure, nb_model_home_and_garden, nb_model_internet_and_telecom, nb_model_jobs_and_education, nb_model_law_and_government, nb_model_online_communities, nb_model_people_and_society, nb_model_pets_and_animals, nb_model_real_estate, nb_model_reference, nb_model_science, nb_model_shopping, nb_model_sports, nb_model_travel"); pref("browser.newtabpage.activity-stream.discoverystream.personalization.version", 1); pref("browser.newtabpage.activity-stream.feeds.recommendationproviderswitcher", true); pref("browser.urlbar.update1.interventions", false); pref("browser.urlbar.update1.searchTips", false); pref("browser.urlbar.update2.expandTextOnFocus", false); pref("canvas.mozgetasfile.enabled", false); pref("devtools.performance.recording.preset", "web-developer"); pref("dom.about_newtab_sanitization.enabled", false); pref("dom.image-lazy-loading.enabled", false); pref("dom.input_events.beforeinput.enabled", false); pref("dom.security.skip_about_page_csp_allowlist_and_assert", false); pref("dom.security.skip_about_page_has_csp_assert", false); pref("dom.security.skip_html_fragment_assertion", false); pref("dom.security.skip_remote_script_assertion_in_system_priv_context", false); pref("dom.textMetrics.actualBoundingBox.enabled", true); pref("dom.textMetrics.baselines.enabled", false); pref("dom.textMetrics.emHeight.enabled", false); pref("dom.textMetrics.fontBoundingBox.enabled", false); pref("dom.worker.console.dispatch_events_to_main_thread", true); pref("extensions.experiments.enabled", false); pref("full-screen-api.exit-on.windowOpen", true); pref("full-screen-api.exit-on.windowRaise", true); pref("geo.provider.network.timeout", 60000); pref("gfx.webrender.debug.tile-cache-logging", false); pref("gfx.webrender.enable-capture", false); pref("gfx.webrender.enable-item-cache", false); pref("gfx.webrender.enable-multithreading", true); pref("javascript.options.property_error_message_fix", false); pref("layout.css.comparison-functions.enabled", false); pref("layout.css.prefixes.columns", false); pref("layout.css.serialize-grid-implicit-tracks", true); pref("media.videocontrols.picture-in-picture.keyboard-controls.enabled", false); pref("network.socket.forcePort", ""); pref("places.search.matchDiacritics", false); pref("privacy.dynamic_firstparty.limitForeign", false); pref("privacy.restrict3rdpartystorage.expiration_redirect", 900); pref("privacy.restrict3rdpartystorage.heuristic.redirect", true); pref("toolkit.shutdown.fastShutdownStage", 0); pref("toolkit.shutdown.lateWriteChecksStage", 0); pref("webgl.out-of-process", false); ``` ==REMOVED or HIDDEN ```js pref("browser.urlbar.update1.expandTextOnFocus", false); pref("devtools.toolbox.content-frame", true); pref("extensions.contentblocker.enabled", false); pref("extensions.legacy.enabled", false); pref("geo.wifi.xhr.timeout", 60000); pref("javascript.options.parser_defer_allocation", false); pref("layout.css.parsing.parallel", true); pref("signon.management.page.enabled", true); ``` ==CHANGED ```js pref("browser.tabs.documentchannel", true); // prev: false pref("browser.tabs.remote.separatedMozillaDomains", "addons.mozilla.org,accounts.firefox.com"); // prev: "addons.cdn.mozilla.net,addons.mozilla.org,accounts.firefox.com" pref("browser.tabs.remote.useCORP", true); // prev: false pref("corroborator.enabled", true); // prev: false pref("dom.missing_prop_counters.enabled", true); // prev: false pref("dom.security.featurePolicy.enabled", true); // prev: false pref("dom.serviceWorkers.parent_intercept", true); // prev: false pref("gfx.webrender.enable-low-priority-pool", true); // prev: false pref("layout.css.outline-style-auto.enabled", true); // prev: false pref("layout.css.text-underline-position.enabled", true); // prev: false pref("layout.css.use-counters.enabled", true); // prev: false pref("layout.css.use-counters-unimplemented.enabled", true); // prev: false pref("media.peerconnection.ice.obfuscate_host_addresses", true); // prev: false pref("webgl.default-low-power", true); // prev: false ```

earthlng commented 4 years ago
some bugzilla tickets

* apz.touch_acceleration_factor_x Bug [1605755](https://bugzilla.mozilla.org/show_bug.cgi?id=1605755) Add touch acceleration * apz.touch_acceleration_factor_y Bug [1605755](https://bugzilla.mozilla.org/show_bug.cgi?id=1605755) Add touch acceleration * browser.newtabpage.activity-stream.discoverystream.personalization.modelKeys Bug [1615734](https://bugzilla.mozilla.org/show_bug.cgi?id=1615734) - Update v2 models Bug [1612337](https://bugzilla.mozilla.org/show_bug.cgi?id=1612337) - Moving to ff prefs * browser.newtabpage.activity-stream.discoverystream.personalization.version Bug [1612337](https://bugzilla.mozilla.org/show_bug.cgi?id=1612337) - Moving to ff prefs * browser.tabs.allowTabDetach Bug [616130](https://bugzilla.mozilla.org/show_bug.cgi?id=616130) - Add option to disable tab detaching * browser.tabs.documentchannel Bug [1610888](https://bugzilla.mozilla.org/show_bug.cgi?id=1610888) - Disable DocumentChannel and SW-e10s. Bug [1596682](https://bugzilla.mozilla.org/show_bug.cgi?id=1596682) - Allow DocumentChannel to ride the trains. * browser.tabs.remote.separatedMozillaDomains Bug [1582132](https://bugzilla.mozilla.org/show_bug.cgi?id=1582132) - Remove addons.cdn.mozilla.net from the list of separatedMozillaDomains Bug [1556655](https://bugzilla.mozilla.org/show_bug.cgi?id=1556655) - Add addons.cdn.mozilla.net to the list of separatedMozillaDomains * browser.tabs.remote.useCORP Bug [1602363](https://bugzilla.mozilla.org/show_bug.cgi?id=1602363) - Also pref on Cross-Origin-Resource-Policy for Android Bug [1602363](https://bugzilla.mozilla.org/show_bug.cgi?id=1602363) - Let Cross-Origin-Resource-Policy ride the trains Bug [1594748](https://bugzilla.mozilla.org/show_bug.cgi?id=1594748) - Enable resab on Nightly except Android; * browser.urlbar.update1.expandTextOnFocus Bug [1613699](https://bugzilla.mozilla.org/show_bug.cgi?id=1613699) - Rename browser.urlbar.update1.expandTextOnFocus pref to ...update2... Bug [1603780](https://bugzilla.mozilla.org/show_bug.cgi?id=1603780) - Set browser.urlbar.update1.expandTextOnFocus default value in Nightly. Bug [1601339](https://bugzilla.mozilla.org/show_bug.cgi?id=1601339) - Disable expandTextOnFocus. Bug [1599784](https://bugzilla.mozilla.org/show_bug.cgi?id=1599784) - Enable update1 prefs by default. Bug [1597698](https://bugzilla.mozilla.org/show_bug.cgi?id=1597698) - Move all megabar prefs under a urlbar.update1 branch. * browser.urlbar.update1.interventions Bug [1613608](https://bugzilla.mozilla.org/show_bug.cgi?id=1613608) - Enable Interventions in Nightly but not in xpcshell tests. Bug [1613608](https://bugzilla.mozilla.org/show_bug.cgi?id=1613608) - Enable Interventions in Nightly. Bug [1606917](https://bugzilla.mozilla.org/show_bug.cgi?id=1606917) - Port the Interventions experiment into a new provider. * browser.urlbar.update1.restrictTabAfterKeyboardFocus Bug [1608766](https://bugzilla.mozilla.org/show_bug.cgi?id=1608766) - Disable tabbing through results after focusing the Urlbar with the keyboard, behind a pref. * browser.urlbar.update1.searchTips Bug [1613869](https://bugzilla.mozilla.org/show_bug.cgi?id=1613869) - Enable urlbar.update1.* prefs on early Beta. Bug [1609699](https://bugzilla.mozilla.org/show_bug.cgi?id=1609699) - Rename browser.urlbar.searchTips pref to browser.urlbar.update1.searchTips. * browser.urlbar.update2.expandTextOnFocus Bug [1613699](https://bugzilla.mozilla.org/show_bug.cgi?id=1613699) - Rename browser.urlbar.update1.expandTextOnFocus pref to ...update2... * canvas.mozgetasfile.enabled Bug [1588980](https://bugzilla.mozilla.org/show_bug.cgi?id=1588980) - Part 1: Hide HTMLCanvasElement.mozGetAsFile behind a preference; * corroborator.enabled Bug [1608308](https://bugzilla.mozilla.org/show_bug.cgi?id=1608308) - Enable Corroborate.jsm telemetry on release. * devtools.performance.recording.preset Bug [1597381](https://bugzilla.mozilla.org/show_bug.cgi?id=1597381) - Create profiler presets for about:profiling; * devtools.toolbox.content-frame Bug [1585747](https://bugzilla.mozilla.org/show_bug.cgi?id=1585747) - Remove devtools preference devtools.toolbox.content-frame * dom.about_newtab_sanitization.enabled Bug [1609635](https://bugzilla.mozilla.org/show_bug.cgi?id=1609635) - Whitelist about:newtab/home from content sanitization * dom.image-lazy-loading.enabled Bug [1608905](https://bugzilla.mozilla.org/show_bug.cgi?id=1608905) - Parse the HTMLImageElement.loading attribute. * dom.input_events.beforeinput.enabled Bug [970802](https://bugzilla.mozilla.org/show_bug.cgi?id=970802) - part 3: Implement `beforeinput` event dispatcher and add `onbeforeinput` event handler attribute * dom.missing_prop_counters.enabled Bug [1610972](https://bugzilla.mozilla.org/show_bug.cgi?id=1610972) - Enable unimplemented use counters in all channels * dom.serviceWorkers.parent_intercept Bug [1610888](https://bugzilla.mozilla.org/show_bug.cgi?id=1610888) - Disable DocumentChannel and SW-e10s. Bug [1588154](https://bugzilla.mozilla.org/show_bug.cgi?id=1588154) - make dom.serviceWorkers.parent_intercept true by default * dom.storage.next_gen Bug [1608449](https://bugzilla.mozilla.org/show_bug.cgi?id=1608449) - Disable LSNG in 73. * dom.textMetrics.actualBoundingBox.enabled Bug [1102584](https://bugzilla.mozilla.org/show_bug.cgi?id=1102584) - patch 3 - Enable support for the actualBoundingBox* attributes of TextMetrics. Bug [1102584](https://bugzilla.mozilla.org/show_bug.cgi?id=1102584) - patch 2 - Implement extended attributes of the TextMetrics object (preffed off by default). * dom.textMetrics.baselines.enabled Bug [1102584](https://bugzilla.mozilla.org/show_bug.cgi?id=1102584) - patch 2 - Implement extended attributes of the TextMetrics object (preffed off by default). * dom.textMetrics.emHeight.enabled Bug [1102584](https://bugzilla.mozilla.org/show_bug.cgi?id=1102584) - patch 2 - Implement extended attributes of the TextMetrics object (preffed off by default). * dom.textMetrics.fontBoundingBox.enabled Bug [1102584](https://bugzilla.mozilla.org/show_bug.cgi?id=1102584) - patch 2 - Implement extended attributes of the TextMetrics object (preffed off by default). * dom.worker.console.dispatch_events_to_main_thread Bug [1613147](https://bugzilla.mozilla.org/show_bug.cgi?id=1613147) - Console API on worker dispatches messages to the main-thread behind prefs, * extensions.contentblocker.enabled Bug [1357107](https://bugzilla.mozilla.org/show_bug.cgi?id=1357107) - Remove nsContentBlocker. Bug [1597541](https://bugzilla.mozilla.org/show_bug.cgi?id=1597541) - Added pref and disabled nsContentBlocker by default. * extensions.experiments.enabled Bug [1524327](https://bugzilla.mozilla.org/show_bug.cgi?id=1524327) remove MOZ_ALLOW_LEGACY_EXTENSIONS and extensions.legacy.enabled * extensions.legacy.enabled Bug [1524327](https://bugzilla.mozilla.org/show_bug.cgi?id=1524327) remove MOZ_ALLOW_LEGACY_EXTENSIONS and extensions.legacy.enabled * full-screen-api.exit-on.windowOpen Bug [1432856](https://bugzilla.mozilla.org/show_bug.cgi?id=1432856) - Added prefs for DOM fullscreen leave on window open or raise. * full-screen-api.exit-on.windowRaise Bug [1432856](https://bugzilla.mozilla.org/show_bug.cgi?id=1432856) - Added prefs for DOM fullscreen leave on window open or raise. * geo.provider.network.timeout Bug [1613627](https://bugzilla.mozilla.org/show_bug.cgi?id=1613627) - Rename all 'geo.wifi' related preferences to match the 'geo.provider.' convention and move default values to all.js. * geo.provider.network.url Bug [1613627](https://bugzilla.mozilla.org/show_bug.cgi?id=1613627) - Rename all 'geo.wifi' related preferences to match the 'geo.provider.' convention and move default values to all.js. * geo.wifi.uri Bug [1613627](https://bugzilla.mozilla.org/show_bug.cgi?id=1613627) - Rename all 'geo.wifi' related preferences to match the 'geo.provider.' convention and move default values to all.js. * geo.wifi.xhr.timeout Bug [1613627](https://bugzilla.mozilla.org/show_bug.cgi?id=1613627) - Rename all 'geo.wifi' related preferences to match the 'geo.provider.' convention and move default values to all.js. * gfx.webrender.compositor Bug [1592509](https://bugzilla.mozilla.org/show_bug.cgi?id=1592509) - Re-enable gfx.webrender.compositor by default on Windows Bug [1592016](https://bugzilla.mozilla.org/show_bug.cgi?id=1592016) - Enable gfx.webrender.compositor by default on macOS. Bug [1592044](https://bugzilla.mozilla.org/show_bug.cgi?id=1592044) - Reduce the frequency of IOSurface and framebuffer creation and destruction with the help of a surface pool. Bug [1604088](https://bugzilla.mozilla.org/show_bug.cgi?id=1604088) - Switch OS compositor off by default on Windows. Bug [1592509](https://bugzilla.mozilla.org/show_bug.cgi?id=1592509) - Enable gfx.webrender.compositor by default on Windows Bug [1592150](https://bugzilla.mozilla.org/show_bug.cgi?id=1592150) - Enable support for partial updates in the WebRender OS compositor on macOS. Bug [1592510](https://bugzilla.mozilla.org/show_bug.cgi?id=1592510) - Make partial updates with WebRender OS compositor work on Windows * gfx.webrender.debug.tile-cache-logging Bug [1605283](https://bugzilla.mozilla.org/show_bug.cgi?id=1605283) - Improve support for invalidation debugging and testing * gfx.webrender.enable-item-cache Bug [1558926](https://bugzilla.mozilla.org/show_bug.cgi?id=1558926) - Part 1: Add data structures and pref for display item caching * gfx.webrender.enable-low-priority-pool Bug [1595708](https://bugzilla.mozilla.org/show_bug.cgi?id=1595708) - Cargo build timings SVG output Freezes the entire browser with WebRender Bug [1604570](https://bugzilla.mozilla.org/show_bug.cgi?id=1604570) - Enable low priority thread pool on Linux Bug [1602905](https://bugzilla.mozilla.org/show_bug.cgi?id=1602905) - Enable low priority thread pool on Windows * gfx.webrender.enable-multithreading Bug [1613167](https://bugzilla.mozilla.org/show_bug.cgi?id=1613167) - Enable/Disable rayon in WebRender via pref. * javascript.options.parser_defer_allocation Bug [1610340](https://bugzilla.mozilla.org/show_bug.cgi?id=1610340) - Remove deferred allocation switch Bug [1607930](https://bugzilla.mozilla.org/show_bug.cgi?id=1607930) - Enable deferred allocation mode by default Bug [1603188](https://bugzilla.mozilla.org/show_bug.cgi?id=1603188) - Add a pref to allow enabling deferred allocation mode by default in the browser * javascript.options.property_error_message_fix Bug [1259822](https://bugzilla.mozilla.org/show_bug.cgi?id=1259822) - Part 1: Add pref to enable fix for accessing property of null or undefined. * layout.css.comparison-functions.enabled Bug [1609428](https://bugzilla.mozilla.org/show_bug.cgi?id=1609428) - Implement min() / max() / clamp() for simple css types behind a pref. * layout.css.outline-style-auto.enabled Bug [1031664](https://bugzilla.mozilla.org/show_bug.cgi?id=1031664) - Enable outline-style: auto. * layout.css.parsing.parallel Bug [1608907](https://bugzilla.mozilla.org/show_bug.cgi?id=1608907) - Remove layout.css.parsing.parallel. * layout.css.prefixes.columns Bug [1308636](https://bugzilla.mozilla.org/show_bug.cgi?id=1308636) Part 3 - Remove moz-prefixed aliases for column-gap and CSS multi-column properties. * layout.css.serialize-grid-implicit-tracks Bug [1599206](https://bugzilla.mozilla.org/show_bug.cgi?id=1599206) - Don't serialize implicit tracks for grid-template properties, as they make the computed style not round-trip. * layout.css.text-underline-position.enabled Bug [1606997](https://bugzilla.mozilla.org/show_bug.cgi?id=1606997) - Let text-underline-position ride the train. Bug [770780](https://bugzilla.mozilla.org/show_bug.cgi?id=770780) - Enable CSS text-underline-position property on Nightly builds. Bug [770780](https://bugzilla.mozilla.org/show_bug.cgi?id=770780) - Add support for parsing of the CSS text-underline-position property. * layout.css.use-counters.enabled Bug [1610972](https://bugzilla.mozilla.org/show_bug.cgi?id=1610972) - Enable unimplemented use counters in all channels * layout.css.use-counters-unimplemented.enabled Bug [1610972](https://bugzilla.mozilla.org/show_bug.cgi?id=1610972) - Enable unimplemented use counters in all channels * media.peerconnection.ice.obfuscate_host_addresses Bug [1598001](https://bugzilla.mozilla.org/show_bug.cgi?id=1598001) - Add default value for obfuscate_host_addresses.whitelist pref; Bug [1588817](https://bugzilla.mozilla.org/show_bug.cgi?id=1588817) - Enable mDNS hostname obfuscation on desktop platforms; Bug [1554976](https://bugzilla.mozilla.org/show_bug.cgi?id=1554976) - Add plumbing to enable/disable host address obfuscation; * media.videocontrols.picture-in-picture.keyboard-controls.enabled Bug [1613460](https://bugzilla.mozilla.org/show_bug.cgi?id=1613460) - Only enable keyboard control for PiP in Nightly. Bug [1602841](https://bugzilla.mozilla.org/show_bug.cgi?id=1602841) - Implement keystroke handling for PiP window for video controls. * network.socket.forcePort Bug [1596799](https://bugzilla.mozilla.org/show_bug.cgi?id=1596799) - Have a preference to force remote TCP/UDP port remapping for easier local network testing, * permissions.delegation.enabled Bug [1603674](https://bugzilla.mozilla.org/show_bug.cgi?id=1603674) - Add a new API to check if permission delegation and Feature Policy are enabled Bug [1600883](https://bugzilla.mozilla.org/show_bug.cgi?id=1600883) - Enable Feature Policy allow attribute and permission delegation by default Bug [1483631](https://bugzilla.mozilla.org/show_bug.cgi?id=1483631) - Restrict nested permission requests in webrtc with permission delegate Bug [1610572](https://bugzilla.mozilla.org/show_bug.cgi?id=1610572) - Disable Feature Policy for FF73. * places.search.matchDiacritics Bug [1606731](https://bugzilla.mozilla.org/show_bug.cgi?id=1606731) - Ignore diacritics when searching the browser history. * privacy.dynamic_firstparty.limitForeign Bug [1587182](https://bugzilla.mozilla.org/show_bug.cgi?id=1587182) - add `limitForeignContexts` attribute to support dynamic FPI; * privacy.restrict3rdpartystorage.expiration_redirect Bug [1507055](https://bugzilla.mozilla.org/show_bug.cgi?id=1507055) - Implement Anti-tracking heuristic for redirects, * privacy.restrict3rdpartystorage.heuristic.redirect Bug [1507055](https://bugzilla.mozilla.org/show_bug.cgi?id=1507055) - Implement Anti-tracking heuristic for redirects, * privacy.userContext.longPressBehavior Bug [1606265](https://bugzilla.mozilla.org/show_bug.cgi?id=1606265) - Work on new tab containers menu popup. * privacy.userContext.newTabContainerOnLeftClick.enabled Bug [1606265](https://bugzilla.mozilla.org/show_bug.cgi?id=1606265) - Work on new tab containers menu popup. * security.tls.version.min Bug [1606734](https://bugzilla.mozilla.org/show_bug.cgi?id=1606734) - Disable TLS 1.0 and 1.1 by default, Bug [1579270](https://bugzilla.mozilla.org/show_bug.cgi?id=1579270) - Disable TLS 1.0 and TLS 1.1 in Nightly, * signon.management.page.enabled Bug [1606888](https://bugzilla.mozilla.org/show_bug.cgi?id=1606888) - remove signon.management.page.enabled * toolkit.shutdown.fastShutdownStage Bug [1606880](https://bugzilla.mozilla.org/show_bug.cgi?id=1606880) - Implement fast shutdown prefs * toolkit.shutdown.lateWriteChecksStage Bug [1606880](https://bugzilla.mozilla.org/show_bug.cgi?id=1606880) - Implement fast shutdown prefs * webgl.default-low-power Bug [1579984](https://bugzilla.mozilla.org/show_bug.cgi?id=1579984) - Default to low-power for WebGL powerPreference. * webgl.disable-extensions Bug [1477756](https://bugzilla.mozilla.org/show_bug.cgi?id=1477756) - Client-side bindings mirror for precise CC, and merge similar codepaths. * webgl.out-of-process Bug [1477756](https://bugzilla.mozilla.org/show_bug.cgi?id=1477756) - Initial out-of-process WebGL implementation.

dartraiden commented 4 years ago

pref("media.peerconnection.ice.obfuscate_host_addresses", true); // prev: false Nice, now Firefox passes Local IP Address test at https://browserleaks.com/webrtc without touching _media.peerconnection.ice.default_addressonly or _media.peerconnection.ice.nohost

Thorin-Oakenpants commented 4 years ago

OT: @earthlng hah, this is quite interesting

Edit: ..aaaaaand ... 1621732

crssi commented 4 years ago

Thank you all. I ❤️ you. 😄

tartpvule commented 4 years ago

corroborator.enabled - flipped on (seen this before but I can't remember WTF it is)

791

Basically reads omni.jar on every startup to check its signature then report telemetry.

tartpvule commented 4 years ago

^ thanks. Whatever "then report telemetry" means exactly, telemetry should be covered by the master switch (I'm not going to bother checking - feel free to do so yourselves), so we're fine to ignore the corroborator pref unless there is something else about it

It uses Services.telemetry.scalarSet, so I think the master telemetry switch covers it. IMO, this "Corroborator" costs disk I/O even when telemetry is master off-ed, so I would still disable it, but that's me.

earthlng commented 4 years ago

IMO we don't need allowTabDetach nor the featurePolicy pref (but add the delegation pref)

While looking at privacy.dynamic_firstparty.limitForeign I saw that we missed a new value 5 for cookieBehavior (2701), added in FF69 (1547813)

The 2 new restrict3rdpartystorage prefs relax the ETP restrictions on storage for certain redirects, to reduce breakage. I assume this only applies if the cookieBehavior is set to 4 or 5 and therefore doesn't affect us since we block all 3rd party cookies and site data. Reduced breakage is probably something that people who change the cookieBehavior pref appreciate and thus I think we can ignore these 2 prefs.

extensions.experiments.enabled allows DevEdition + nightly users to install Webextensions with "experimental" (ie custom) APIs. Irrelevant for Release users (unless they mod their omni.ja files)

earthlng commented 4 years ago

^^ SGTM

earthlng commented 4 years ago

does the ^^ refer to the proposed tls deprecated

yes

does giggling mean it's OK?

what?

[the rest]

IDK and IDC, and frankly I don't want to do this anymore

Thorin-Oakenpants commented 4 years ago

what?

SGTM ... Silently Giggling To Myself .. but now I realize it's a version of LGTM (looks good to me)

Thorin-Oakenpants commented 4 years ago

IDK and IDC, and frankly I don't want to do this anymore

Just do what you can, there's no obligation. Even if you do nothing, that's OK - take care of number one first - you've done more than your fair share - so thanks.

I can do the changelogs - but what I can't do is the diffs (just do one at each final release if you can) - unless you can share your scripts / delegate that with someone. Without the diffs, it would hamper quality/knowledge. I would also miss your insights, but at least with diffs there would be other eyes on them.

Take care, and hoard that toilet paper (have you stocked up amo and guns yet?)

earthlng commented 4 years ago

SGTM ... Silently Giggling To Myself .. but now I realize it's a version of LGTM (looks good to me)

oh, never heard/saw that one. I meant "sounds good to me"

the diffs (just do one at each final release if you can)

yeah I can do that

Take care

thanks mate, you too!

and hoard that toilet paper (have you stocked up amo and guns yet?)

haha, that was a joke, I'm not hoarding anything. No guns either. I'm not worried about the virus at all, only about what "The Powers That Shouldn't Be" will do with it.

found an awesome recommend read from Pocket

you faked that, right? really cool if it's real though

earthlng commented 4 years ago

I would drop the stuff in the brackets and add a "Currently applies to ..." on the 1st line.