New laptop at the office... These settings reflect my own compromise between usability, security and privacy. I’ll try to comment my choices, though.
- Privacy Badger
- uBlock Origin
- HTTPS Everywhere
uMatrix requires some interaction every now and then. You’ll get the hang of it, eventually. 🙂 Essentially: when a site breaks, open it up, think about the red stuff you want to enable and do that by clicking into the top half of the squares to allow stuff; click into the bottom half to disallow stuff. Reload every now and then until you’re happy. If you want to keep these settings, click on the lock. If you want to revert it all, click on the two arrows going in a circle.
2020-02-16: I used to list “HTTPS by default” as well. Not sure I still need it, though. It’s also pretty annoying because I still visit sites that are HTTP only.
media.autoplay.default = 1
(1 means always block, 2 means you want to be prompted for every site that tries to autoplay...)
If all the text seems too small to read comfortably, use the following instead of zooming every page to 150%:
layout.css.devPixelsPerPx = 1.5
Sadly I don’t remember what else to change right now!
Remember that you can import your bookmarks from an old profile via the library / bookmark manager.
The rest of this page is about your preferences. Depending on your version of Firefox or PureBrowser or whatever you are using, the exact labels might differ.
This is from the preferences in search (the looking glass icon).
- default search engine: DuckDuckGo
- do not provide search suggestions
- remove all one-click search engines except for DuckDuckGo, Debian Packages, Wikipedia (en)
Privacy & Security
This is from the preferences in privacy/security (the padlock icon).
- block trackers “in all windows”
- block cookies “all third-party cookies”
- block cryptominers
- block fingerprinters
- send do not track: always (I know, probably useless)
- delete cookies and site data when closing Firefox
- manage data and delete all the stuff that you don’t recognise
- manage permissions and add all the site for which you want to retain logins and preferences (hopefully less than two dozen of them?)
- ask to save logins and passwords: yes (my laptop has an encrypted disk and I power it off when I leave)
- when looking at the exceptions, it’s find to see that financial stuff is still listed; it’s all about defense in depth
- I don’t use a master password
- Remember history is fine; I look at it often enough (use private browsing windows if you don’t want that)
- when using the address bar, suggest from the browsing history, bookmarks, and open tabs
- permissions (location, camera, microphone): open settings for each of them and check that new requests are to be blocked (I allow notifications from a bunch of sites)
- block websites from automatically playing sound
- block pop-up windows
- warn you when websites try to install add-ons (I also remove all the exceptions)
- prevent accessibility services from accessing your browser (it gives them a lot of power)
- do not allow the browser to send technical and interaction data to Mozilla
- do not send backlogged crash reports
- do not block dangerous and fraudulent sites (otherwise Google will know about all the apps you download as these get checked)
- ask when servers request your personal certificate
- do not query OCSP responder servers (those servers will know your IP and the sites you are visiting, see Revocation checking and Chrome's CRL)