Firefox and encrypted connections

[nexon]

Hey

Someone check this?

Error while use Network settings --> Mozilla Firefox and thunderbird --> Scan secure traffic in Mozilla apps when checked this box i see error MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE.
When i uncheck then all working. I use arkenfox user.js for better privacy because firefox in stock is not so good.

I tried change Use Mozilla certificate store (manually installed certificate from control panel export and import via firefox). But must be uncheck. 

[nexon]

UPDATE : I fix it.

On webpage you can verify your web browser how much is secure : https://coveryourtracks.eff.org

Problem with certificate : 

1.) Export certificate to desktop for example and import in firefox browser https://support.kaspersky.com/common/compatibility/14620#block2

2.) needs edit user.js --> security.cert_pinning.enforcement_level 2 on security.cert_pinning.enforcement_level 1 

Level 1 - Firefox ignores Windows and Firefox certificates at default. Kaspersky, from the other hand, monitor Firefox traffic through certificates.

*enable strict PKP (Public Key Pinning) * 0=disabled, 1=allow user MiTM (default; such as your antivirus), 2=strict * [SETUP-WEB] MOZILLA_PKIX_ERROR_KEY_PINNING_FAILURE: If you rely on an AV (antivirus) to protect * your web browsing by inspecting ALL your web traffic, then override to current default

3.) In Kaspersky turn on “Scan secure traffic in Mozilla applications” and select “Use Mozilla certificate store”.


*OPTIONAL SETUP edit arkenfox user.js 
- edit privacy.resistFingerprinting on false (zoom on webpages will be saved if you setup on 120% for example will be saved after you close Firefox). If you have on true then always after shutdown firefox will be reset on 100%.
- edit browser.privatebrowsing.autostart on false if you want allow Kaspersky password manager addon working

Also edit this if you dont want resize window because is not maximized but opens only small window. After edit this window starts maximized on your monitor also history, will be saved after firefox shutdown.

All was setup on true, and changed to false.

user_pref("privacy.sanitize.sanitizeOnShutdown",        false);
user_pref("privacy.clearOnShutdown.cache",               false);
user_pref("privacy.clearOnShutdown.cookies",            false);
user_pref("privacy.clearOnShutdown.downloads",       false);
user_pref("privacy.clearOnShutdown.formdata",          false);
user_pref("privacy.clearOnShutdown.history",              false);
user_pref("privacy.clearOnShutdown.offlineApps",      false);
user_pref("privacy.clearOnShutdown.sessions",           false);
user_pref("privacy.clearOnShutdown.openWindows",  false);

and also this :

user_pref("privacy.cpd.offlineApps",                false);
user_pref("privacy.cpd.cache",                         false);
user_pref("privacy.cpd.cookies",                      false);
user_pref("privacy.cpd.downloads",                false);
user_pref("privacy.cpd.formdata",                   false);
user_pref("privacy.cpd.history",                       false);
user_pref("privacy.cpd.sessions",                    false);

For enabling cookies on website (simply allow it on website ctrl+i then select tab Premissions --> third item from the top setup cookies or something like that (i dont have english language in firefox) uncheck apply default and in right select enable.

Thats all my prefered edit for this template.

If someone have problem with Firefox and arkenfox user.js look here and check your settings.
Hope i help someone who use this.
Arkenfox really disabling not only telemetry but a lot of stuff. Now is securest browser ever.

Here are screenshots before use arkenfox (firefox default downloaded on default settings - downloaded and installed like most people have) and after.

 

Edited April 29, 2023 by nexon