Skip to content

Commit 669930f

Browse files
passkeys attestation
1 parent dd081db commit 669930f

File tree

1 file changed

+5
-2
lines changed

1 file changed

+5
-2
lines changed

user.js

Lines changed: 5 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -47,7 +47,7 @@
4747
0600: BLOCK IMPLICIT OUTBOUND
4848
0700: DNS / DoH / PROXY / SOCKS
4949
0800: LOCATION BAR / SEARCH BAR / SUGGESTIONS / HISTORY / FORMS
50-
0900: PASSWORDS
50+
0900: PASSWORDS / PASSKEYS
5151
1000: DISK AVOIDANCE
5252
1200: HTTPS (SSL/TLS / OCSP / CERTS / HPKP)
5353
1600: REFERERS
@@ -324,7 +324,7 @@ user_pref("browser.formfill.enable", false);
324324
user_pref("browser.search.separatePrivateDefault", true); // [FF70+]
325325
user_pref("browser.search.separatePrivateDefault.ui.enabled", true); // [FF71+]
326326

327-
/*** [SECTION 0900]: PASSWORDS
327+
/*** [SECTION 0900]: PASSWORDS / PASSKEYS
328328
[1] https://support.mozilla.org/kb/use-primary-password-protect-stored-logins-and-pas
329329
***/
330330
user_pref("_user.js.parrot", "0900 syntax error: the parrot's expired!");
@@ -350,6 +350,9 @@ user_pref("network.auth.subresource-http-auth-allow", 1);
350350
/* 0907: enforce no automatic authentication on Microsoft sites [FF131+] [MAC]
351351
* On macOS, SSO only works on corporate devices ***/
352352
// user_pref("network.http.microsoft-entra-sso.enabled", false); // [DEFAULT: false]
353+
/* 0910: enforce no direct attestation in passkeys [FF144+]
354+
// [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1981587 ***/
355+
pref("security.webauthn.always_allow_direct_attestation", false); // [DEFAULT: false]
353356

354357
/*** [SECTION 1000]: DISK AVOIDANCE ***/
355358
user_pref("_user.js.parrot", "1000 syntax error: the parrot's gone to meet 'is maker!");

0 commit comments

Comments
 (0)