The purpose of this setup is for Privacy and protection against tracking/fingerprinting and malicious sites. Not Anonimity.
Firefox profiles #
Firefox profile manager:
Windows: Win+R -> “firefox.exe -P”
Linux: In terminal -> “firefox -P”
Location:
- (Windows) C:\Users<username>\AppData\Roaming\Mozilla\Firefox\Profiles<profile_name>
- (Linux) /home/<username>/
Custom, security-focused, automatic profiles (Worth to check out):
User.js (https://github.com/arkenfox/user.js) .
Download user.js file & modify as needed. Examples:
- *user_pref("intl.accept_languages", "en-US, en");*
- *user_pref("app.update.auto", true);*
Save file in a new profiling location > Open profile manager > Create new profile and add the recently created folder.
Firefox Profilemaker (https://ffprofile.com )
Guidance provided at “start” click.
Download profile. Apply to a new profile.
Manual Configuration #
About:preferences Common privacy/security preferences:
- OCSP enabled
- Enable DNT (Do Not Track)
- Disable cookies/Fingerprinting
- Manage cookie storage (As needed)
- Block dangerous content
- SOCKSv5 / HTTP proxy if needed.
- Enable DoH (DNS over HTTPS); select a secure DNS server. (Needs more testing)
About:config
-
(TLS minimum version) “security.tls.version.min” -> 3,
-
(See the full URL @ search bar) browser.urlbar.trimURLs -> true
-
(Randomize http referer) network.http.referer.spoofSource -> true
-
(Disable fonts) browser.display.use_document_fonts -> 0
-
(Auto-update Firefox) extensions.update.autoUpdateDefault -> true/false
-
(Fingerprinting) privacy.resistFingerprinting -> true
-
See saved Certificate Authorities (CA): about:certificate
Addons & Extensions #
- Certificate patrol (Current Cas)
- EFF’s Privacy Badger
- Cookie quick manager
- Privacy Settings / Ublock Origin / uMatrix (Advanced)
- User-Agent Switcher (Check for the most common user-agent headers)
- CanvasBlocker
Browsers to use #
Tools for testing your browser’s fingerprint, headers, DNS leaks, etc. #
- https://ipleak.net/ (Good for DNS leaks and headers check)
- https://panopticlick.eff.org (Good general browser check analysis)
- https://browserleaks.com/ (Good for fingerprinting analysis)
- http://ip-check.info/ (more advanced browser check)
Other readings #
- https://ssd.eff.org/en/module/understanding-and-circumventing-network-censorship
- https://anonymous-proxy-servers.net/en/jondofox.html
CIS official benchmark #
Sources: StationX, Electronic Frontier Foundation (EFF), Mozilla Foundation, JonDonym.
