search

pyllyukko / user.js

user.js -- Firefox configuration hardening
MIT License
2.74k stars 232 forks source link

README: import test suites from ghacks-user.js #241

Closed nodiscc closed 1 year ago

nodiscc commented 7 years ago
nodiscc commented 7 years ago

I think we can wait for ghacks-user.js changes to settle a bit before working on this.

pyllyukko commented 7 years ago

It would be nice to have some kind of "how to verify all this works" section that maps most settings/mitigations to test sites that you can use to verify that the controls are working as expected.

Atavic commented 7 years ago

Some of these tests point at the IP address + DNS Address:

If you are now connected to a VPN and you see your ISP IP, then your system is leaking.

They focus on Anonimity and are listed under 2. Multiple Tests (except ZScaler that focuses on Threat Prevention | Access Control | Data Protection on enterprise).

Uniqueness and Entropy is the interest of 1. Fingerprinting tests.

Some URLs under 4. Encryption are for specific issues, not always related to a browser, as Heartbleed (redundant?)

I think 5. does no sense, it's an internal list of pages from Mozilla. 6. are even more specific tests.

Maybe a short explanation about some of these URLs may be useful. It's a long list and could be cut into 2 groups, with a few essentials as https://html5sec.org/ and https://badssl.com/ followed by 2. Multiple Tests and 6. (explained).

nodiscc commented 1 year ago

I'm no longer working on this.