thunderbird-user.js

Thunderbird privacy, security and anti-fingerprinting: a comprehensive user.js template for configuration and hardening

MIT License

Stars
140
thunderbird-user.js - v115.0 Latest Release

Published by HorlogeSkynet 11 months ago

What's Changed

This release addresses Thunderbird 115 ESR.


Changed

  • Arkenfox v102.1..v115.1 migration

Added

  • mail.inline_attachments.text
  • mail.html_sanitize.drop_conditional_css
  • datareporting.policy.dataSubmissionPolicyBypassNotification

Fixed

  • Missing semi-colon in (reset) mail.rights.version

Removed

  • intl.fallbackCharsetList.ISO-8859-1
  • mailnews.view_default_charset
  • mailnews.send_default_charset
  • mailnews.reply_in_default_charset
thunderbird-user.js - v102.2

Published by HorlogeSkynet over 1 year ago

What's Changed

This release addresses Thunderbird 102 ESR.


Changed

  • Reset signon.rememberSignons
  • Noted (again !) that security.cert_pinning.enforcement_level should be relaxed for first ProtonMail Bridge integration

Added

  • mail.compose.warned_about_customize_from
  • Microsoft Office 365 and Yahoo OAuth2 support in dedicated wiki page

Removed

  • Duplicate network.cookie.lifetimePolicy

Thanks to @atomGit, @giving-sesame and @oleole39 for their time πŸ™

thunderbird-user.js - v102.1

Published by HorlogeSkynet about 2 years ago

What's Changed

This release addresses Thunderbird 102 ESR.


Changed

  • Due to Thunderbird 102 "ETP Strict Mode" lack of support (see #27 and #28), we :

    • Re-enabled FPI ;
    • Re-enabled DNT header ;
    • Restored network.cookie.cookieBehavior tweak ;
    • Re-enabled ETP with custom settings (including query parameter stripping) ;
    • Re-dealt with persistent storage-related preferences (2700).
  • mail.biff.alert.show_* preferences have been reset to their default values (if you need them, add them to your override script)

Added

  • mail.openpgp.remind_encryption_possible

Removed

  • privacy.userContext.newTabContainerOnLeftClick.enabled (unimplemented)

Thanks to @atomGit for their recommendations πŸ™

thunderbird-user.js - v102.0

Published by HorlogeSkynet about 2 years ago

What's Changed

This release addresses Thunderbird 102 ESR.


Changed

  • Apply (upstream) Arkenfox v78..v91 upstream migration
  • Removes unnecessary leading spaces in some documentation lines
  • Migrate to mail.default_send_format to send plaintext email (v101)

Added

  • app.use_without_mail_account
  • mailnews.message_display.disable_remote_image
  • mail.compose.add_link_preview
  • mail.compose.warn_public_recipients.*
  • mail.biff.use_new_count_in_badge
  • mail.biff.show_alert & mail.biff.alert.show_*
  • calendar.extract.service.enabled

Removed

  • Cleans outdated 0300 section documentation (related to auto-install)
  • Gets rid of mail.calendar-integration.opt-out & calendar.useragent.extra

Thanks to @Dupond for reviewing/testing this version πŸ™

thunderbird-user.js - v91.2

Published by HorlogeSkynet about 2 years ago

What's Changed

This release addresses Thunderbird 91 ESR.


Changed

  • Prefer "HTML" literal (uppercased) when used in documentation
  • Improve permissions.memory_only preference documentation (see #23)
  • Move (and reset) mail.tabs.autoHide from 9110 to 9000 (personal section) (see #21 and #25)

Thanks to @demided (@ghost) and @jakeafoster for their time !

thunderbird-user.js - v91.1

Published by HorlogeSkynet over 2 years ago

What's Changed

This release addresses Thunderbird 91 ESR.


Added

  • Enforce mail.suppress_content_language preference (see #19)
  • Enforce mail.sanitize_date_header preference (see #19)
  • Mention mail.compose.other.header preference (see #19)
  • Note that an empty User-Agent may break Microsoft Exchange OAuth2 for non-RFP (see #19)

Changed

  • Bump actions/checkout and actions/setup-node to v3

Thanks to @giving-sesame for their suggestions !

thunderbird-user.js - v78.2

Published by HorlogeSkynet over 2 years ago

What's Changed

This release addresses Thunderbird 78 ESR.


Added

  • Enforce mail.suppress_content_language preference (see #19)
  • Enforce mail.sanitize_date_header preference (see #19)

Thanks to @giving-sesame for their suggestions !

thunderbird-user.js - v91

Published by HorlogeSkynet over 2 years ago

What's Changed

This release addresses the v91 (ESR) Thunderbird stable branch.


⚠️
Due to upstream sections "namespace" changes, mail-related preferences sections have been shifted from 6000 / 6100 / 6200 / 6300 to 9100 / 9200 / 9300 / 9400.
You are advised to reinstall from scratch the template and append your preferences overrides on top of it.
⚠️


Breaking

  • Move mail-related preferences sections from 6XXX to 9XXX
  • Disable very buggy mail.password_protect_local_cache preference
  • Show a prompt when opening a link in external applications (hardening)

Added

  • Apply (upstream) Arkenfox v78..v91 upstream migration
  • mail.phishing.detection.* preferences
  • security.osclientcerts.autoload preference
  • mail.biff.show_badge new preference (TB >= v91.0.2)

Changed

  • [SETTING] tags global cleanup
  • Enforce mail.phishing.detection.* preferences
  • Enable mailnews.sendformat.auto_downgrade preference
  • Higher mail.compose.big_attachments.threshold_kb to 9220KB
  • Hide sensitive information from chat desktop notifications (when enabled)

Removed

  • Autocrypt and Enigmail addons related preferences
  • permissions.default.* preferences (missing from TB)
  • mail.cloud_files.inserted_urls.footer.link dropped preference
  • toolkit.telemetry.prompted (apparently dropped) preference
thunderbird-user.js - v78.1

Published by HorlogeSkynet almost 3 years ago

Fix release addressing the v78 Thunderbird stable branch.

πŸ› πŸ”’ Fix an issue causing privacy.sanitize.sanitizeOnShutdown to be ignored

πŸ’„ Don't clear mail.collect_addressbook pref (feature already disabled)


Thanks to @atomGit for pointing those out πŸ™

thunderbird-user.js - v78

Published by HorlogeSkynet about 3 years ago

Final release addressing the v78 Thunderbird stable branch.

πŸ†• Enforce Arkenfox v68..v78 changes

πŸ”’ Add some new hardening

πŸ”’ Prevent some system settings from leaking in reply header

✍️ Send emails in plain text by default

😢 Hide about:rights notification for fresh profiles

thunderbird-user.js - v78-beta6

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

πŸ› Re-enable dom.IntersectionObserver.enabled by default as it may break error console (see #13)

thunderbird-user.js - v78-beta5

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

πŸ†• Some more hardening from 12bytes.org related project

πŸ†• For fresh profiles, hide about:rights notification

πŸ› (Re-)disable some previously (un)commented-out options related to RSS feeds (see v78-beta2)

πŸ“ Proper GitHub templates for issues and pull request

thunderbird-user.js - v78-beta4

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

πŸ†• Acorn static linting has been replaced by a tailored ESLint one (see #11 for underlying purposes)

πŸ†• Add very basic CardBook (optional) privacy hardening (see also upcoming #12)

πŸ› Remove old UX features that seem not to be available anymore

πŸ†• When master password is set, enable (poor) application protection for locally cached emails (intimate relationship threat)

thunderbird-user.js - v78-beta3

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

πŸ› Fixes missing semicolons for new mail.instrumentation.* preferences (thanks to @wickedsp1d3r πŸ™‡)

πŸ†• Limits some information (such as locale) leakage in reply header

thunderbird-user.js - v78-beta2

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

🎨 Fixes some blemishes

πŸ› Fixes wrong value type set for mail.collect_addressbook

πŸ†• Enables some previously commented-out options related to RSS feeds

πŸ†• Incorporates some hardening from CHEF-KOCH/TBCK (abandoned?) project (52d0864e)

πŸ†• New referenced related project !

thunderbird-user.js - v78-beta1

Published by HorlogeSkynet almost 4 years ago

This tag addresses the v78 Thunderbird branch.
As always, test and feedback will be very appreciated.

πŸ†• Arkenfox v68..v78 changes have been applied (minus some options missing from Thunderbird code base)

πŸ”’ Options from section 2500 (hardware fingerprinting) have been widely disabled

πŸ’₯ Prefer sending emails with plain text content by default (the Earth thanks you ❀️ 🌲)

πŸ’₯ Account provisioning from "partner providers" has been disabled

thunderbird-user.js - v68

Published by HorlogeSkynet almost 4 years ago

Final release addressing the v68.X Thunderbird branch.

  • Migration from gHacks to Arkenfox has been applied to metadata, various pointer links as long as Wiki references. For further information, please refer to <arkenfox/user.js#1009>.
thunderbird-user.js - v68-beta5

Published by HorlogeSkynet over 4 years ago

  • mailnews.use_received_date got a wrong type, and setting it by default made the corresponding documentation inaccurate : this has been fixed
  • Sorry for the notification about a v68 : my fingers snapped πŸ™„
thunderbird-user.js - v68-beta4

Published by HorlogeSkynet over 4 years ago

  • Disables Mozilla telemetry prompt for fresh installs (c57ead1b7629d816282c6a9c208343931ebcaaf4)
  • Adds a note about certificate pinning enforcement and ProtonMail's Bridge integration (3ce96df737801dd099d94a3814624aa18c459c6b)
thunderbird-user.js - v68-beta3

Published by HorlogeSkynet over 4 years ago

  • Improves documentation (#8)
  • Improves default template preferences (#9)
  • Improves installation instructions (#8)
  • An updater.shΒ script is on its way (maybe) (ghacksuserjs/ghacks-user.js#910)
Badges
Extracted from project README
License: MIT