Hello, If your main intent is to centrally manage/disable DoH in Firefox, you can easily do so through a GPO - the relevant links for this are: https://support.mozilla.org/en-US/kb/customizing-firefox-using-group-policy-windows https://github.com/mozilla/policy-templates/blob/master/README.md#dnsoverhttps
No need to make the matter more complicated than it is ;-) Best regards Am So., 8. Sept. 2019 um 22:28 Uhr schrieb Eddie Rowe < [email protected]>: > Given Mozilla’s decision to turn on DNS over HTTPS we have to secure > Firefox to disable this type of nonsense or remove it from every PC in the > next two weeks. Chrome is configured through an easy to manage GPO which > leverages other really smart people who have created a security baseline > along with preconfigured GPOs, while Firefox does not seem to have this > level of support. > > > > Assuming a person is new to Firefox, exactly what are we supposed to > modify to setup things securely? I see references to things going into > Mozilla.cfg, policies.json, GPO, autoconfig.js…I probably missed a file > too. I see people helpfully answering a question and telling the person to > go to https://developer.mozilla.org/en-US/Firefox/Enterprise_deployment > for the answer to their question, but there are just more links there. I > see people posting to not to bother with GPO because all the options are > not there, but other say there are GPO settings that are no elsewhere… I > see references that one thing is set one place, another place overrides… I > see one document say the autoconfig.js file goes into the folder where > Firefox is installed, but the same document says it does into a subfolder… > I see references to setting preferences in the policies.json file, but I > thought Mozilla.cfg was to be used for this? Finally I see mention that > there are preferences that are set in the source code that are not exposed > to about:config? > > > > Surely there is a simple one page document that walks you through this so > we can spend a LIMITED amount of time sorting this out??? > > > > > https://www.zdnet.com/article/mozilla-to-gradually-enable-dns-over-https-for-firefox-us-users-later-this-month/ > - Ready or not, here comes DNS over HTTPS to bypass all security you have > using DNS to block dangerous sites. > > > > > _______________________________________________ > Enterprise mailing list > [email protected] > https://mail.mozilla.org/listinfo/enterprise > > To unsubscribe from this list, please visit > https://mail.mozilla.org/listinfo/enterprise or send an email to > [email protected] with a subject of "unsubscribe" >
_______________________________________________ Enterprise mailing list [email protected] https://mail.mozilla.org/listinfo/enterprise To unsubscribe from this list, please visit https://mail.mozilla.org/listinfo/enterprise or send an email to [email protected] with a subject of "unsubscribe"
