privacytools / privacytools.io

🛡🛠 You are being watched. Protect your privacy against global mass surveillance.
https://www.privacyguides.org
Creative Commons Zero v1.0 Universal
3.12k stars 384 forks source link

Suggesting additional FF about:config privacy settings #525

Closed gryzor2 closed 5 years ago

gryzor2 commented 6 years ago

Hi,

I believe firefox users would benefit from having these settings in about:config :

media.peerconnection.dtmf.enabled false https://bugzilla.mozilla.org/show_bug.cgi?id=1313406

https://bugzilla.mozilla.org/show_bug.cgi?id=1430213 media.peerconnection.rtpsourcesapi.enabled false

media.peerconnection.simulcast false https://wiki.mozilla.org/Media/WebRTC/ReleaseNotes/46#IMPORTANT:_Simulcast_landed_and_is_pref.27d_on

privacy.trackingprotection.storagerestriction.enabled true https://bugzilla.mozilla.org/show_bug.cgi?id=1461921

Additionally, these three keys do not exist by default and must be created by users :

security.ssl.disable_session_identifiers boolean true https://bugzilla.mozilla.org/show_bug.cgi?id=967977 (SSL session caches are abused by GAFAM, which use them as low level TCP cookies)

toolkit.telemetry.coverage.opt-out boolean true https://dustri.org/b/mozilla-is-still-screwing-around-with-privacy-in-firefox.html

extensions.fxmonitor.enabled boolean false https://www.ghacks.net/2018/08/25/firefox-62-firefox-monitor-system-add-on-integration/

Cheers,

ghost commented 6 years ago

@kewde

kewde commented 6 years ago

I have a few Q's abot the following ones?

media.peerconnection.rtpsourcesapi.enabled
media.peerconnection.simulcast false

What's the reasoning for disabling these two?

gryzor2 commented 6 years ago

Hi kwede,

No big reasoning ; I tend to disable media.peerconnection.* generally. I confess I have not looked deep.

ghost commented 6 years ago

Yeah, let's not unnecessarily remove functionality. Though if anyone can suggest a good reason to disable those, we can recommend disabling them too.

Apart from those two, @kewde, do you approve?

ghost commented 6 years ago

@beardog108 What do you think about these settings?

Atavic commented 6 years ago

media.peerconnection.enabled is the master switch. I'm not using any live streaming service, so I disable it.

rtpsourcesapi is used by WebRTC.

Simulcast in WebRTC allows sending multiple resolutions/framerates of the same source.

ghost commented 6 years ago

rtpsourcesapi is used by WebRTC.

Though you can disable WebRTC without disabling rtpsourcesapi, right?

Atavic commented 6 years ago

It's an API used inside WebRTC, see here.

kewde commented 6 years ago

I've had some experience with simulcasting, essentially it will tailor the video resolution to your internet connection. Disabling WebRTC (read: PeerConnection) should take care of it as a whole.