4747 0600: BLOCK IMPLICIT OUTBOUND
4848 0700: DNS / DoH / PROXY / SOCKS
4949 0800: LOCATION BAR / SEARCH BAR / SUGGESTIONS / HISTORY / FORMS
50- 0900: PASSWORDS
50+ 0900: PASSWORDS / PASSKEYS
5151 1000: DISK AVOIDANCE
5252 1200: HTTPS (SSL/TLS / OCSP / CERTS / HPKP)
5353 1600: REFERERS
@@ -324,7 +324,7 @@ user_pref("browser.formfill.enable", false);
324324user_pref ( "browser.search.separatePrivateDefault" , true ) ; // [FF70+]
325325user_pref ( "browser.search.separatePrivateDefault.ui.enabled" , true ) ; // [FF71+]
326326
327- /*** [SECTION 0900]: PASSWORDS
327+ /*** [SECTION 0900]: PASSWORDS / PASSKEYS
328328 [1] https://support.mozilla.org/kb/use-primary-password-protect-stored-logins-and-pas
329329***/
330330user_pref ( "_user.js.parrot" , "0900 syntax error: the parrot's expired!" ) ;
@@ -350,6 +350,9 @@ user_pref("network.auth.subresource-http-auth-allow", 1);
350350/* 0907: enforce no automatic authentication on Microsoft sites [FF131+] [MAC]
351351 * On macOS, SSO only works on corporate devices ***/
352352 // user_pref("network.http.microsoft-entra-sso.enabled", false); // [DEFAULT: false]
353+ /* 0910: enforce no direct attestation in passkeys [FF144+]
354+ // [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1981587 ***/
355+ pref ( "security.webauthn.always_allow_direct_attestation" , false ) ; // [DEFAULT: false]
353356
354357/*** [SECTION 1000]: DISK AVOIDANCE ***/
355358user_pref ( "_user.js.parrot" , "1000 syntax error: the parrot's gone to meet 'is maker!" ) ;
0 commit comments