Thunderbird privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening
MIT License
This release addresses Thunderbird 115 ESR.
mail.inline_attachments.text
mail.html_sanitize.drop_conditional_css
datareporting.policy.dataSubmissionPolicyBypassNotification
mail.rights.version
intl.fallbackCharsetList.ISO-8859-1
mailnews.view_default_charset
mailnews.send_default_charset
mailnews.reply_in_default_charset
Published by HorlogeSkynet over 1 year ago
This release addresses Thunderbird 102 ESR.
signon.rememberSignons
security.cert_pinning.enforcement_level
should be relaxed for first ProtonMail Bridge integrationmail.compose.warned_about_customize_from
network.cookie.lifetimePolicy
Thanks to @atomGit, @giving-sesame and @oleole39 for their time π
Published by HorlogeSkynet about 2 years ago
This release addresses Thunderbird 102 ESR.
Due to Thunderbird 102 "ETP Strict Mode" lack of support (see #27 and #28), we :
network.cookie.cookieBehavior
tweak ;2700
).mail.biff.alert.show_*
preferences have been reset to their default values (if you need them, add them to your override script)
mail.openpgp.remind_encryption_possible
privacy.userContext.newTabContainerOnLeftClick.enabled
(unimplemented)Thanks to @atomGit for their recommendations π
Published by HorlogeSkynet about 2 years ago
This release addresses Thunderbird 102 ESR.
mail.default_send_format
to send plaintext email (v101)app.use_without_mail_account
mailnews.message_display.disable_remote_image
mail.compose.add_link_preview
mail.compose.warn_public_recipients.*
mail.biff.use_new_count_in_badge
mail.biff.show_alert
& mail.biff.alert.show_*
calendar.extract.service.enabled
0300
section documentation (related to auto-install)mail.calendar-integration.opt-out
& calendar.useragent.extra
Thanks to @Dupond for reviewing/testing this version π
Published by HorlogeSkynet about 2 years ago
This release addresses Thunderbird 91 ESR.
permissions.memory_only
preference documentation (see #23)mail.tabs.autoHide
from 9110
to 9000
(personal section) (see #21 and #25)Thanks to @demided (@ghost) and @jakeafoster for their time !
Published by HorlogeSkynet over 2 years ago
This release addresses Thunderbird 91 ESR.
mail.suppress_content_language
preference (see #19)mail.sanitize_date_header
preference (see #19)mail.compose.other.header
preference (see #19)actions/checkout
and actions/setup-node
to v3Thanks to @giving-sesame for their suggestions !
Published by HorlogeSkynet over 2 years ago
This release addresses Thunderbird 78 ESR.
mail.suppress_content_language
preference (see #19)mail.sanitize_date_header
preference (see #19)Thanks to @giving-sesame for their suggestions !
Published by HorlogeSkynet over 2 years ago
This release addresses the v91 (ESR) Thunderbird stable branch.
β οΈ
Due to upstream sections "namespace" changes, mail-related preferences sections have been shifted from6000 / 6100 / 6200 / 6300
to9100 / 9200 / 9300 / 9400
.
You are advised to reinstall from scratch the template and append your preferences overrides on top of it.
β οΈ
6XXX
to 9XXX
mail.password_protect_local_cache
preferencev78..v91
upstream migrationmail.phishing.detection.*
preferencessecurity.osclientcerts.autoload
preferencemail.biff.show_badge
new preference (TB >= v91.0.2)[SETTING]
tags global cleanupmail.phishing.detection.*
preferencesmailnews.sendformat.auto_downgrade
preferencemail.compose.big_attachments.threshold_kb
to 9220KBpermissions.default.*
preferences (missing from TB)mail.cloud_files.inserted_urls.footer.link
dropped preferencetoolkit.telemetry.prompted
(apparently dropped) preferencePublished by HorlogeSkynet almost 3 years ago
Fix release addressing the v78 Thunderbird stable branch.
π π Fix an issue causing privacy.sanitize.sanitizeOnShutdown
to be ignored
π Don't clear mail.collect_addressbook
pref (feature already disabled)
Thanks to @atomGit for pointing those out π
Published by HorlogeSkynet about 3 years ago
Final release addressing the v78 Thunderbird stable branch.
π Enforce Arkenfox v68..v78
changes
π Add some new hardening
π Prevent some system settings from leaking in reply header
βοΈ Send emails in plain text by default
πΆ Hide about:rights
notification for fresh profiles
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π Re-enable dom.IntersectionObserver.enabled
by default as it may break error console (see #13)
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π Some more hardening from 12bytes.org related project
π For fresh profiles, hide about:rights
notification
π (Re-)disable some previously (un)commented-out options related to RSS feeds (see v78-beta2)
π Proper GitHub templates for issues and pull request
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π Acorn static linting has been replaced by a tailored ESLint one (see #11 for underlying purposes)
π Add very basic CardBook (optional) privacy hardening (see also upcoming #12)
π Remove old UX features that seem not to be available anymore
π When master password is set, enable (poor) application protection for locally cached emails (intimate relationship threat)
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π Fixes missing semicolons for new mail.instrumentation.*
preferences (thanks to @wickedsp1d3r π)
π Limits some information (such as locale) leakage in reply header
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π¨ Fixes some blemishes
π Fixes wrong value type set for mail.collect_addressbook
π Enables some previously commented-out options related to RSS feeds
π Incorporates some hardening from CHEF-KOCH/TBCK (abandoned?) project (52d0864e)
π New referenced related project !
Published by HorlogeSkynet almost 4 years ago
This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.
π Arkenfox v68..v78 changes have been applied (minus some options missing from Thunderbird code base)
π Options from section 2500
(hardware fingerprinting) have been widely disabled
π₯ Prefer sending emails with plain text content by default (the Earth thanks you β€οΈ π²)
π₯ Account provisioning from "partner providers" has been disabled
Published by HorlogeSkynet almost 4 years ago
Final release addressing the v68.X Thunderbird branch.
Published by HorlogeSkynet over 4 years ago
mailnews.use_received_date
got a wrong type, and setting it by default made the corresponding documentation inaccurate : this has been fixedv68
: my fingers snapped πPublished by HorlogeSkynet over 4 years ago
Published by HorlogeSkynet over 4 years ago
updater.sh
Β script is on its way (maybe) (ghacksuserjs/ghacks-user.js#910)