From 5712402b586a9c49e1c32ff4221d84726e34138d Mon Sep 17 00:00:00 2001 From: Thorin-Oakenpants Date: Fri, 19 Apr 2019 04:01:11 +0000 Subject: [PATCH] Updated 1.3 Implementation (markdown) --- 1.3-Implementation.md | 9 ++++----- 1 file changed, 4 insertions(+), 5 deletions(-) diff --git a/1.3-Implementation.md b/1.3-Implementation.md index 6aff3c1..a87f3f9 100644 --- a/1.3-Implementation.md +++ b/1.3-Implementation.md @@ -28,12 +28,11 @@ While not 100% definitive, we have included `[SETUP*` tags for troubleshooting a - We disable search & form history (0860) * :star: Form data can easily be stolen by third parties. The PoC (Proof of Concept) linked in [this](https://blog.mindedsecurity.com/2011/10/autocompleteagain.html) 2011 article is still not mitigated almost 8 years later -:exclamation: SUPER IMPORTANT: Cookies, First Party Isolation, RFP +:exclamation: SUPER IMPORTANT: First Party Isolation (FPI), privacy.resistFingerprinting (RFP) -- First party cookies only are enabled (2701) -- First Party Isolation is enabled (4001) - * :star: It is recommended that you clear (Ctrl-Shift-Del) everything (except passwords and site preferences) when first enabling this, so non-Origin Attribute data is wiped -- `privacy.resistFingerprinting` (RFP) is enabled (section 4500) +- FPI is enabled (4001) + * It is recommended that you clear (Ctrl-Shift-Del) everything (except passwords and site preferences) when first enabling (or disabling permanently) this, so orphaned Origin Attribute data is cleared +- RFP is enabled (section 4500) * As RFP patches land in stable, alternative existing preferences are moved to section 4600 and made inactive * :star: non-RFP users may want to enable section 4600 * :star: RFP users should reset items in 4600 in about:config, as some cause RFP to not behave as you would expect and alter your fingerprint