summaryrefslogtreecommitdiff
path: root/netwerk
diff options
context:
space:
mode:
authorMoonchild <git-repo@palemoon.org>2020-03-29 10:26:15 +0200
committerGitHub <noreply@github.com>2020-03-29 10:26:15 +0200
commitf2b6fd2481ae5e7381a938d52f7d8f14bfc4f5c2 (patch)
treebe450c52feb21fc7807208ae54a792fdc53c2994 /netwerk
parent568ea8deaa4fa5f07b6987e75d35e53eb3af66dd (diff)
parent0afd46b48d5e7d1ca7109c687368b7de23e267c5 (diff)
downloaduxp-f2b6fd2481ae5e7381a938d52f7d8f14bfc4f5c2.tar.gz
Merge pull request #1500 from MoonchildProductions/1280
Remove HPKP
Diffstat (limited to 'netwerk')
-rw-r--r--netwerk/base/security-prefs.js21
1 files changed, 0 insertions, 21 deletions
diff --git a/netwerk/base/security-prefs.js b/netwerk/base/security-prefs.js
index 702315d430..973c731239 100644
--- a/netwerk/base/security-prefs.js
+++ b/netwerk/base/security-prefs.js
@@ -120,27 +120,6 @@ pref("security.webauth.u2f_enable_usbtoken", false);
// OCSP must-staple
pref("security.ssl.enable_ocsp_must_staple", true);
-// HPKP settings
-
-// Enable pinning checks by default.
-pref("security.cert_pinning.enforcement_level", 2);
-// Do not process hpkp headers rooted by not built in roots by default.
-// This is to prevent accidental pinning from MITM devices and is used
-// for tests.
-pref("security.cert_pinning.process_headers_from_non_builtin_roots", false);
-// Impose a maximum age on HPKP headers, to avoid sites getting permanently
-// blacking themselves out by setting a bad pin. (60 days by default)
-// https://tools.ietf.org/html/rfc7469#section-4.1
-pref("security.cert_pinning.max_max_age_seconds", 5184000);
-// Controls whether or not HPKP (the HTTP Public Key Pinning header) is enabled.
-// If true, the header is processed and collected HPKP information is consulted
-// when looking for pinning information.
-// If false, the header is not processed and collected HPKP information is not
-// consulted when looking for pinning information. Preloaded pins are not
-// affected by this preference.
-// Default: false
-pref("security.cert_pinning.hpkp.enabled", false);
-
// If a request is mixed-content, send an HSTS priming request to attempt to
// see if it is available over HTTPS.
pref("security.mixed_content.send_hsts_priming", true);