Skip to content

Commit 954b600

Browse files
committed
Disable rest of the 128-bit AES ciphers for TLSv1.[23]
1 parent d3e9155 commit 954b600

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

user.js

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1215,6 +1215,9 @@ user_pref("security.ssl3.ecdh_rsa_aes_128_sha", false);
12151215
user_pref("security.ssl3.ecdh_ecdsa_aes_128_sha", false);
12161216
user_pref("security.ssl3.dhe_rsa_camellia_128_sha", false);
12171217
user_pref("security.ssl3.dhe_rsa_aes_128_sha", false);
1218+
user_pref("security.ssl3.ecdhe_ecdsa_aes_128_gcm_sha256", false); // 0xc02b TLSv1.2
1219+
user_pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", false); // 0xc02f TLSv1.2
1220+
user_pref("security.tls13.aes_128_gcm_sha256", false); // 0x1301 TLSv1.3
12181221

12191222
// PREF: Disable RC4
12201223
// https://developer.mozilla.org/en-US/Firefox/Releases/38#Security

0 commit comments

Comments
 (0)