diff options
Diffstat (limited to 'libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch')
| -rw-r--r-- | libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch b/libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch index d72d29d89..9ca7caec8 100644 --- a/libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch +++ b/libre/iceweasel/9001-always-sync-remote-settings-with-local-dump.patch @@ -970,18 +970,18 @@ certificate revocations. 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/modules/libpref/init/all.js b/modules/libpref/init/all.js -index 907e8ebcef..65db6bd04c 100644 +index dba747cbbb..7dcabe01b2 100644 --- a/modules/libpref/init/all.js +++ b/modules/libpref/init/all.js -@@ -186,7 +186,7 @@ pref("security.pki.distrust_ca_policy", 2); - #if defined(NIGHTLY_BUILD) - pref("security.pki.crlite_mode", 2); - #else +@@ -172,7 +172,7 @@ pref("security.cert_pinning.max_max_age_seconds", 5184000); + // 0: Disable CRLite entirely + // 1: Enable and check revocations via CRLite, but only collect telemetry + // 2: Enable and enforce revocations via CRLite -pref("security.pki.crlite_mode", 1); +pref("security.pki.crlite_mode", 0); - #endif // Represents the expected certificate transparency log merge delay (including + // the time to generate a CRLite filter). Currently 28 hours in seconds. -- 2.30.0 |