• Firefox

Firefox

About

Links

• mozilla.org products

• MozillaZine Knowledge - Base About protocol links

• MozillaZine Knowledge - About:config

• MozillaZine Knowledge - About:config entries

• Mozilla Support - Firefox Keyboard shortcuts - Perform common Firefox tasks quickly

Install

Setup Mozilla Repo

This may be necessary on Ubuntu based distributions, where Firefox and Thunderbird not natively available via the package management, only via snap.

support.mozilla.org Install Firefox on Linux

Usage tricks

Reset Authentication Header

• Either use a specific URL with wrong credentials for example
  https://user:wrong_pass@host.domain.tld/

• Open History/Chronic

  1. CTRL+H or Burger -> Manage History

  2. Search for site
  3. rightclick forget entire page

Options

Restore Titlebar

• about:config

• browser.tabs.inTitlebar -> 0

Address bar

I like using the explicit searchbar. In my opinion Firefox must not search in the address bar nor do anything fancy.

Disable search

• about:config

• keyword.enable -> false

Disable domain guessing

I personally don't like the feature of prefixing entered domains with "www." and suffixing with ".com".

• about:config

• browser.fixup.alternate.enabled -> false

Disable fallback to https

When i'm testing something as a sysadmin, i don't want to change back the protocol from https:// to http:// manually on each iteration. Timeout -> fine, thanks. Don't try anything else.

• about:config

• browser.fixup.fallback-to-https -> false

Disable loading favicon.ico

When i'm testing something as a sysadmin, sometime the ever repeating requests for /favicon.ico are just disturbing the workflow.

• about:config

• browser.chrome.site_icons -> false

Change syncserver Desktop

• Make sure these URLs match! You'll have to logout from firefox-sync to change this URLs once you change them.
• You have to unlock your key vault with master password.

• Debug it using about:sync-log

Standard: identity.sync.tokenserver.uri;https://token.services.mozilla.com/token/1.0/sync/1.5

Changed: identity.sync.tokenserver.uri;https://wiki.rockstable.it:8443/token/1.0/sync/1.5

Please for Android please see
#Custom syncserver Android

Video conferencing options

Problems with video conferencing?

Make sure to allow p2p-connections for WebRTC media.peerconnection.enable = true

Enable Cisco Openh264 in about:addons media.gmp-gmpopenh264.enabled = true

Enable Hardware accelleration? media.webrtc.hw.h264.enabled = true

GPU Acceleration

Basic

• layers.acceleration.disabled      = false

Webrender

• gfx.webrender.compositor  = true

• gfx.webrender.enabled     = true

Addons and extensions

Lists

Mandatory

• uBlock Origin by Raymond Hill

• Dark Reader by Alexander Shutau

• Privacy Badger by EFF Technologists

• Password Management
  • For individuals KeepassXC

    • keepassxc.org - Setup Browser Integration

    • KeePassXC-Browser by KeePassXC Team

  • For teams

    Gopass Bridge von Martin Hoefling

    • gopass.pw

    • github gopass

    • github gopassbridge

• User-Agent Switcher and Manager by Ray

• Plasma Integration by KDE

Optionally

• AdBlocker for YouTube™ by AdblockLite

• DownThemAll! by Nils Maier

• Tab Reloader (page auto refresh) by James Fray

• NoScript by Giorgio Maone

• Lightbeam 3.0 by Princiya

• Worldwide Radio by Oleksandr

• Audio Equalizer by Muyor

Deprecated

• Browserpass von Maxim Baz, Erayd

• Browserpass OTP von Maxim Baz, Erayd

Gopass Bridge

It's not the gopass from the repo
https://www.gopass.pw/

Old setup

Download and install the package

   1 sudo aptitude install gnupg2 gopass-
   2 #https://github.com/gopasspw/gopass/releases
   3 wget https://github.com/gopasspw/gopass/releases/download/v1.9.2/gopass_1.9.2_linux_amd64.deb
   4 sudo dpkg -i gopass_1.9.2_linux_amd64.deb

Create a directory structure

   1 mkdir -pv \
   2         ~/.config/gopass \
   3         ~/.mozilla/native-messaging-hosts
   4 chmod 0700 ~/.mozilla/native-messaging-hosts

Create a wrapper script for gopass
~/.config/gopass/gopass_wrapper.sh

   1 #!/bin/sh
   2 
   3 if [ -f ~/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
   4         source ~/.gpg-agent-info
   5         export GPG_AGENT_INFO
   6 else
   7         eval $(gpg-agent --daemon)
   8 fi
   9 
  10 export PATH="$PATH:/usr/local/bin" # required on MacOS/brew
  11 export GPG_TTY="$(tty)"
  12 
  13 /usr/local/bin/gopass jsonapi listen
  14 
  15 exit $?

Set wrapper executable

   1 chmod u+x ~/.config/gopass/gopass_wrapper.sh

Allow the browser extension to execute the wrapper script
~/.mozilla/native-messaging-hosts/com.justwatch.gopass.json

   1 {
   2     "name": "com.justwatch.gopass",
   3     "description": "Gopass wrapper to search and return passwords",
   4     "path": "/home/tobias/.config/gopass/gopass_wrapper.sh",
   5     "type": "stdio",
   6     "allowed_extensions": [
   7         "{eec37db0-22ad-4bf1-9068-5ae08df8c7e9}"
   8     ]
   9 }

New setup

• https://github.com/gopasspw/gopass-jsonapi/blob/master/README.md

• Filling in passwords from browser

• developer.mozilla.org - Native Messaging

Download and install the package

   1 #https://github.com/gopasspw/gopass-jsonapi/releases
   2 sudo aptitude install gnupg2 gopass-
   3 #https://github.com/gopasspw/gopass/releases/latest
   4 wget https://github.com/gopasspw/gopass/releases/download/v1.14.0/gopass_1.14.0_linux_amd64.deb
   5 sudo dpkg -i gopass_1.14.0_linux_amd64.deb
   6 #https://github.com/gopasspw/gopass-jsonapi/releases/latest
   7 wget https://github.com/gopasspw/gopass-jsonapi/releases/download/v1.11.1/gopass-jsonapi_1.11.1_linux_amd64.deb
   8 sudo dpkg -i gopass-jsonapi_1.11.1_linux_amd64.deb

Configure
gopass-jsonapi configure

   1 For which browser do you want to install gopass native messaging? [brave,chrome,chromium,firefox,iridium,slimjet,vivaldi] [chrome]: 
   2 Install for all users? (might require sudo gopass) [y/N/q]: 
   3 In which path should gopass_wrapper.sh be installed? [/home/tobias/.config/gopass]: 
   4 Native Messaging Setup Preview:
   5 Wrapper Script (/home/tobias/.config/gopass/gopass_wrapper.sh):
   6 #!/bin/sh
   7 
   8 if [ -f ~/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
   9         source ~/.gpg-agent-info
  10         export GPG_AGENT_INFO
  11 else
  12         eval $(gpg-agent --daemon)
  13 fi
  14 
  15 export PATH="$PATH:/usr/local/bin" # required on MacOS/brew
  16 export PATH="$PATH:/usr/local/MacGPG2/bin" # required on MacOS/GPGTools GPGSuite
  17 export GPG_TTY="$(tty)"
  18 
  19 /usr/local/bin/gopass-jsonapi listen
  20 
  21 exit $?
  22 
  23 
  24 Manifest File (/home/tobias/.config/google-chrome/NativeMessagingHosts/com.justwatch.gopass.json):
  25 {
  26     "name": "com.justwatch.gopass",
  27     "description": "Gopass wrapper to search and return passwords",
  28     "path": "/home/tobias/.config/gopass/gopass_wrapper.sh",
  29     "type": "stdio",
  30     "allowed_origins": [
  31         "chrome-extension://kkhfnlkhiapbiehimabddjbimfaijdhk/"
  32     ]
  33 }
  34 Install manifest and wrapper? [Y/n/q]:  

Set wrapper executable

   1 chmod u+x ~/.config/gopass/gopass_wrapper.sh

Themes

Dark reader can change the look of a website. But some pages still stay white like newtab.

Addons > Themes > Activate dark theme

Probably obsolete

Flash for linux in iceweasel

• Old problems with ever changing workarounds
• Some words of warning: There is no sandboxing in iceweasel like in chrom(e|ium)

   1 aptitude install pepperflashplugin-nonfree browser-plugin-freshplayer-pepperflash

Windows with multiple processes

• Check if it's enabled: about:support

• Force it with about:config boolean key: browser.tabs.remote.force-enable;true

Video hardware acceleration

• with about:support

• http://askubuntu.com/questions/491750/force-enable-hardware-acceleration-in-firefox

• about:config

  • webgl.enable=true

  • layers.acceleration.force-enabled=true

• Try it.

     1 export MOZ_USE_OMTC=1 && iceweasel
  

• If you like, you can persist for all users in /etc/X11/Xsession.d/90environment

     1 export MOZ_USE_OMTC=1
  

Disable opening of new sites with middlemouse

• Check if it's enabled: about:support

• Disable it with about:config boolean key: middlemouse.contentLoadURL;false

Firefox 79+ for Android

Stable does not allow you to use about:config anymore. Firefox Nightly still has support.

Custom syncserver Android

To enter a alternative sync server you have to enable the new debug menu:

Burger menu > Settings > About Firefox
Click on Firefox Browser multiple (6) times.

Debug menu is now enabled until next browser restart. Burger menu > Settings > "Sync Debug"

Now you can add a alternative sync server.

Now to some very strange behaviour:

• If you are already login in, to your sync account: logoff.

• Set again! the custom sync server with a trailing slash /.

  • https://wiki.rockstable.it:8443/token/1.0/sync/1.5/

  • Yes, it works with https

• Restart the Firefox App with the button from the menu.
• Log in to your sync account.

majurgens one did some real dark voodoo to find this out, thanks!
Github Issue

Tested with Firefox 113.

For the desktop version see
#Change syncserver Desktop

Firefox Errors

ocsp stapling failed

MOZILLA_PKIX_ERROR_REQUIRED_TLS FEATURE_MISSING

ocsp stapling failed

about:config

security.ssl.enable_ocsp_must_staple -> false