{"action":"created","issue":{"url":"https://api.github.com/repos/pyllyukko/user.js/issues/9","labels_url":"https://api.github.com/repos/pyllyukko/user.js/issues/9/labels{/name}","comments_url":"https://api.github.com/repos/pyllyukko/user.js/issues/9/comments","events_url":"https://api.github.com/repos/pyllyukko/user.js/issues/9/events","html_url":"https://github.com/pyllyukko/user.js/issues/9","id":57337601,"number":9,"title":"Find out about these about:config settings","user":{"login":"pyllyukko","id":1058704,"avatar_url":"https://avatars.githubusercontent.com/u/1058704?v=3","gravatar_id":"","url":"https://api.github.com/users/pyllyukko","html_url":"https://github.com/pyllyukko","followers_url":"https://api.github.com/users/pyllyukko/followers","following_url":"https://api.github.com/users/pyllyukko/following{/other_user}","gists_url":"https://api.github.com/users/pyllyukko/gists{/gist_id}","starred_url":"https://api.github.com/users/pyllyukko/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pyllyukko/subscriptions","organizations_url":"https://api.github.com/users/pyllyukko/orgs","repos_url":"https://api.github.com/users/pyllyukko/repos","events_url":"https://api.github.com/users/pyllyukko/events{/privacy}","received_events_url":"https://api.github.com/users/pyllyukko/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-11T16:16:41Z","updated_at":"2015-04-20T18:06:02Z","closed_at":null,"body":"These settings in ```about:config``` might have some security/privacy related affect, but information about them is not that easily available:\r\n* security.ssl.false_start.require-npn\r\n* geo.wifi.uri\r\n* browser.formfill.saveHttpsForms\r\n* [breakpad.reportURL](http://kb.mozillazine.org/Breakpad.reportURL) (should we set this to \"\"?)\r\n* extensions.blocklist.level\r\n* network.stricttransportsecurity.preloadlist (quite self-explanatory, but needs reference)\r\n\r\nSee also:\r\n* #6"},"comment":{"url":"https://api.github.com/repos/pyllyukko/user.js/issues/comments/94526204","html_url":"https://github.com/pyllyukko/user.js/issues/9#issuecomment-94526204","issue_url":"https://api.github.com/repos/pyllyukko/user.js/issues/9","id":94526204,"user":{"login":"uberspot","id":237927,"avatar_url":"https://avatars.githubusercontent.com/u/237927?v=3","gravatar_id":"","url":"https://api.github.com/users/uberspot","html_url":"https://github.com/uberspot","followers_url":"https://api.github.com/users/uberspot/followers","following_url":"https://api.github.com/users/uberspot/following{/other_user}","gists_url":"https://api.github.com/users/uberspot/gists{/gist_id}","starred_url":"https://api.github.com/users/uberspot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/uberspot/subscriptions","organizations_url":"https://api.github.com/users/uberspot/orgs","repos_url":"https://api.github.com/users/uberspot/repos","events_url":"https://api.github.com/users/uberspot/events{/privacy}","received_events_url":"https://api.github.com/users/uberspot/received_events","type":"User","site_admin":false},"created_at":"2015-04-20T18:06:02Z","updated_at":"2015-04-20T18:06:02Z","body":"http://thesimplecomputer.info/tscs-firefox-tweak-guide \r\nThis has some more settings as well like \"clipboard.autocopy -> false\" that make sense. They suggest making breakpad.reportURL -> \"\" as well.\r\n\r\n---------------------------------------\r\n\r\nI would also suggest the following as a precaution:\r\n\r\n    user_pref(\"browser.selfsupport.url\", \"\");\r\n    user_pref(\"browser.send_pings.require_same_host\", true); \r\n    user_pref(\"browser.trackingprotection.gethashURL\", \"\"); \r\n    user_pref(\"browser.trackingprotection.updateURL\", \"\");  \r\n    user_pref(\"clipboard.autocopy\", false);                 \r\n    user_pref(\"dom.w3c_touch_events.expose\", false);\r\n    user_pref(\"geo.wifi.logging.enabled\", false);           \r\n    // If you don't use ipv6, disable it\r\n    user_pref(\"network.dns.disableIPv6\", true);             \r\n\r\nAlso, I would suggest adding a comment in the following options in your user.js that states \"These configs break webrtc and/or Firefox Hello\":\r\n\r\n     user_pref(\"media.getusermedia.screensharing.enabled\",\t\tfalse);\r\n     user_pref(\"security.OCSP.require\",\t\t\ttrue);\r\n     user_pref(\"media.peerconnection.enabled\",\t\t\tfalse);\r\n\r\nBecause it's easier for someone to keep them if they want that functionality. \r\n\r\nAlso I would add:\r\n\r\n     user_pref(\"loop.enabled\", false);\r\n\r\n commented out just in case someone wants to disable firefox hello anyway. \r\n\r\nI can submit a pull request for any of these if you want later on when I have more time. :) \r\n"}}