We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Natao arisiva ity resaka mitohy ity. Mametraha fanontaniana azafady raha mila fanampiana.

Security settings in about:configm I am using Mozilla Firefox 50

  • 1 valiny
  • 1 manana an'ity olana ity
  • 1 view
  • Valiny farany nomen'i ideato

SatSanga
SatSanga
more options

I would like to know about changing some security settings in about:config.

Right now in about:config the line [security.OCSP.require;false], and line[services.sync.prefs.sync.security.OCSP.require;false] are set to false.

Would I have better browser security if these two line were set to 'true'?

Are there other security changes I could make in about:config that would result in better security.

I would like to know about changing some security settings in about:config. Right now in about:config the line [security.OCSP.require;false], and line[services.sync.prefs.sync.security.OCSP.require;false] are set to false. Would I have better browser security if these two line were set to 'true'? Are there other security changes I could make in about:config that would result in better security.

Vahaolana nofidina

Hello, the security.OCSP.require to false(the default) means that the OCSP it is not forced. check the security.OCSP.enabled it is 1 (active, enabled) (0, zero, is disabled).

if you force the security.OCSP.require (toggle to true) then probably you will have lags and stuck in the browser because if the ocsp service of a site is down, then the browser will hang.

the services.sync.prefs.sync.security.OCSP.require it is true by deafult.

see also for more explanation : https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/

thank you

Hamaky an'ity valiny ity @ sehatra 👍 1

All Replies (1)

ideato
ideato
more options

Vahaolana Nofidina

Hello, the security.OCSP.require to false(the default) means that the OCSP it is not forced. check the security.OCSP.enabled it is 1 (active, enabled) (0, zero, is disabled).

if you force the security.OCSP.require (toggle to true) then probably you will have lags and stuck in the browser because if the ocsp service of a site is down, then the browser will hang.

the services.sync.prefs.sync.security.OCSP.require it is true by deafult.

see also for more explanation : https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/

thank you