We're calling on all EU-based Mozillians with iOS or iPadOS devices to help us monitor Apple’s new browser choice screens. Join the effort to hold Big Tech to account!

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

This thread was archived. Please ask a new question if you need help.

Security settings in about:configm I am using Mozilla Firefox 50

  • 1 reply
  • 1 has this problem
  • 1 view
  • Last reply by ideato

SatSanga
SatSanga
more options

I would like to know about changing some security settings in about:config.

Right now in about:config the line [security.OCSP.require;false], and line[services.sync.prefs.sync.security.OCSP.require;false] are set to false.

Would I have better browser security if these two line were set to 'true'?

Are there other security changes I could make in about:config that would result in better security.

I would like to know about changing some security settings in about:config. Right now in about:config the line [security.OCSP.require;false], and line[services.sync.prefs.sync.security.OCSP.require;false] are set to false. Would I have better browser security if these two line were set to 'true'? Are there other security changes I could make in about:config that would result in better security.

Chosen solution

Hello, the security.OCSP.require to false(the default) means that the OCSP it is not forced. check the security.OCSP.enabled it is 1 (active, enabled) (0, zero, is disabled).

if you force the security.OCSP.require (toggle to true) then probably you will have lags and stuck in the browser because if the ocsp service of a site is down, then the browser will hang.

the services.sync.prefs.sync.security.OCSP.require it is true by deafult.

see also for more explanation : https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/

thank you

Read this answer in context 👍 1

All Replies (1)

ideato
ideato
more options

Chosen Solution

Hello, the security.OCSP.require to false(the default) means that the OCSP it is not forced. check the security.OCSP.enabled it is 1 (active, enabled) (0, zero, is disabled).

if you force the security.OCSP.require (toggle to true) then probably you will have lags and stuck in the browser because if the ocsp service of a site is down, then the browser will hang.

the services.sync.prefs.sync.security.OCSP.require it is true by deafult.

see also for more explanation : https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-firefox/

thank you