• Firefox

Firefox

Links

• MozillaZine Knowledge - Base About protocol links

• MozillaZine Knowledge - About:config

• MozillaZine Knowledge - About:config entries

• Mozilla Support - Firefox Keyboard shortcuts - Perform common Firefox tasks quickly

Options

Address bar

I like using the explicit searchbar. In my opinion Firefox must not search in the address bar nor do anything fancy.

Disable search

• about:config

• keyword.enable -> false

Disable domain guessing

I personally don't like the feature of prefixing entered domains with "www." and suffixing with ".com".

• about:config

• browser.fixup.alternate.enabled -> false

Disable fallback to https

When i'm testing something as a sysadmin, i don't want to change back the protocol from https:// to http:// manually on each iteration. Timeout -> fine, thanks. Don't try anything else.

• about:config

• browser.fixup.fallback-to-https -> false

Change syncserver Desktop

• Make sure these URLs match! You'll have to logout from firefox-sync to change this URLs once you change them.
• You have to unlock your key vault with master password.

• Debug it using about:sync-log

Standard: identity.sync.tokenserver.uri;https://token.services.mozilla.com/token/1.0/sync/1.5

Changed: identity.sync.tokenserver.uri;https://wiki.rockstable.it:8443/token/1.0/sync/1.5

Please for Android please see
#Custom syncserver Android

Video conferencing options

Problems with video conferencing?

Make sure to allow p2p-connections for WebRTC media.peerconnection.enable = true

Enable Cisco Openh264 in about:addons media.gmp-gmpopenh264.enabled = true

Enable Hardware accelleration? media.webrtc.hw.h264.enabled = true

GPU Acceleration

Basic

• layers.acceleration.disabled      = false

Webrender

• gfx.webrender.compositor  = true

• gfx.webrender.enabled     = true

Addons and extensions

Lists

Mandatory

• uBlock Origin by Raymond Hill

• Dark Reader by Alexander Shutau

• Privacy Badger by EFF Technologists

• Password Management
  • For individuals KeepassXC

    • keepassxc.org - Setup Browser Integration

    • KeePassXC-Browser by KeePassXC Team

  • For teams

    Gopass Bridge von Martin Hoefling

    • gopass.pw

    • github gopass

    • github gopassbridge

Obsolete:

• uMatrix von Raymond Hill

Optionally

• AdBlocker for YouTube™ by AdblockLite

• DownThemAll! by Nils Maier

• Tab Reloader (page auto refresh) by James Fray

• NoScript by Giorgio Maone

• Lightbeam 3.0 by Princiya

• Worldwide Radio by Oleksandr

• Audio Equalizer by Muyor

Deprecated

• Browserpass von Maxim Baz, Erayd

• Browserpass OTP von Maxim Baz, Erayd

Gopass Bridge

It's not the gopass from the repo
https://www.gopass.pw/

Old setup

Download and install the package

   1 sudo aptitude install gnupg2 gopass-
   2 #https://github.com/gopasspw/gopass/releases
   3 wget https://github.com/gopasspw/gopass/releases/download/v1.9.2/gopass_1.9.2_linux_amd64.deb
   4 sudo dpkg -i gopass_1.9.2_linux_amd64.deb

Create a directory structure

   1 mkdir -pv \
   2         ~/.config/gopass \
   3         ~/.mozilla/native-messaging-hosts
   4 chmod 0700 ~/.mozilla/native-messaging-hosts

Create a wrapper script for gopass
~/.config/gopass/gopass_wrapper.sh

   1 #!/bin/sh
   2 
   3 if [ -f ~/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
   4         source ~/.gpg-agent-info
   5         export GPG_AGENT_INFO
   6 else
   7         eval $(gpg-agent --daemon)
   8 fi
   9 
  10 export PATH="$PATH:/usr/local/bin" # required on MacOS/brew
  11 export GPG_TTY="$(tty)"
  12 
  13 /usr/local/bin/gopass jsonapi listen
  14 
  15 exit $?

Set wrapper executable

   1 chmod u+x ~/.config/gopass/gopass_wrapper.sh

Allow the browser extension to execute the wrapper script
~/.mozilla/native-messaging-hosts/com.justwatch.gopass.json

   1 {
   2     "name": "com.justwatch.gopass",
   3     "description": "Gopass wrapper to search and return passwords",
   4     "path": "/home/tobias/.config/gopass/gopass_wrapper.sh",
   5     "type": "stdio",
   6     "allowed_extensions": [
   7         "{eec37db0-22ad-4bf1-9068-5ae08df8c7e9}"
   8     ]
   9 }

New setup

• https://github.com/gopasspw/gopass-jsonapi/blob/master/README.md

• Filling in passwords from browser

• developer.mozilla.org - Native Messaging

Download and install the package

   1 #https://github.com/gopasspw/gopass-jsonapi/releases
   2 sudo aptitude install gnupg2 gopass-
   3 #https://github.com/gopasspw/gopass/releases/latest
   4 wget https://github.com/gopasspw/gopass/releases/download/v1.14.0/gopass_1.14.0_linux_amd64.deb
   5 sudo dpkg -i gopass_1.14.0_linux_amd64.deb
   6 #https://github.com/gopasspw/gopass-jsonapi/releases/latest
   7 wget https://github.com/gopasspw/gopass-jsonapi/releases/download/v1.11.1/gopass-jsonapi_1.11.1_linux_amd64.deb
   8 sudo dpkg -i gopass-jsonapi_1.11.1_linux_amd64.deb

Configure
gopass-jsonapi configure

   1 For which browser do you want to install gopass native messaging? [brave,chrome,chromium,firefox,iridium,slimjet,vivaldi] [chrome]: 
   2 Install for all users? (might require sudo gopass) [y/N/q]: 
   3 In which path should gopass_wrapper.sh be installed? [/home/tobias/.config/gopass]: 
   4 Native Messaging Setup Preview:
   5 Wrapper Script (/home/tobias/.config/gopass/gopass_wrapper.sh):
   6 #!/bin/sh
   7 
   8 if [ -f ~/.gpg-agent-info ] && [ -n "$(pgrep gpg-agent)" ]; then
   9         source ~/.gpg-agent-info
  10         export GPG_AGENT_INFO
  11 else
  12         eval $(gpg-agent --daemon)
  13 fi
  14 
  15 export PATH="$PATH:/usr/local/bin" # required on MacOS/brew
  16 export PATH="$PATH:/usr/local/MacGPG2/bin" # required on MacOS/GPGTools GPGSuite
  17 export GPG_TTY="$(tty)"
  18 
  19 /usr/local/bin/gopass-jsonapi listen
  20 
  21 exit $?
  22 
  23 
  24 Manifest File (/home/tobias/.config/google-chrome/NativeMessagingHosts/com.justwatch.gopass.json):
  25 {
  26     "name": "com.justwatch.gopass",
  27     "description": "Gopass wrapper to search and return passwords",
  28     "path": "/home/tobias/.config/gopass/gopass_wrapper.sh",
  29     "type": "stdio",
  30     "allowed_origins": [
  31         "chrome-extension://kkhfnlkhiapbiehimabddjbimfaijdhk/"
  32     ]
  33 }
  34 Install manifest and wrapper? [Y/n/q]:  

Set wrapper executable

   1 chmod u+x ~/.config/gopass/gopass_wrapper.sh

Themes

Dark reader can change the look of a website. But some pages still stay white like newtab.

Addons > Themes > Activate dark theme

Probably obsolete

Flash for linux in iceweasel

• Old problems with ever changing workarounds
• Some words of warning: There is no sandboxing in iceweasel like in chrom(e|ium)

   1 aptitude install pepperflashplugin-nonfree browser-plugin-freshplayer-pepperflash

Windows with multiple processes

• Check if it's enabled: about:support

• Force it with about:config boolean key: browser.tabs.remote.force-enable;true

Video hardware acceleration

• with about:support

• http://askubuntu.com/questions/491750/force-enable-hardware-acceleration-in-firefox

• about:config

  • webgl.enable=true

  • layers.acceleration.force-enabled=true

• Try it.

     1 export MOZ_USE_OMTC=1 && iceweasel
  

• If you like, you can persist for all users in /etc/X11/Xsession.d/90environment

     1 export MOZ_USE_OMTC=1
  

Disable opening of new sites with middlemouse

• Check if it's enabled: about:support

• Disable it with about:config boolean key: middlemouse.contentLoadURL;false

Firefox 79+ for Android

Stable does not allow you to use about:config anymore. Firefox Nightly still has support.

Custom syncserver Android

To enter a alternative sync server you have to enable the new debug menu:

Burger menu > Settings > About Firefox
Click on Firefox Browser multiple (6) times.

Debug menu is now enabled until next browser restart. Burger menu > Settings > "Sync Debug"

Now you can add a alternative sync server.

Now to some very strange behaviour:

• If you are already login in, to your sync account: logoff.

• Set again! the custom sync server with a trailing slash /.

  • https://wiki.rockstable.it:8443/token/1.0/sync/1.5/

  • Yes, it works with https

• Restart the Firefox App with the button from the menu.
• Log in to your sync account.

majurgens one did some real dark voodoo to find this out, thanks!
Github Issue

Tested with Firefox 113.

For the desktop version see
#Change syncserver Desktop

Firefox Errors

ocsp stapling failed

MOZILLA_PKIX_ERROR_REQUIRED_TLS FEATURE_MISSING

ocsp stapling failed

about:config

security.ssl.enable_ocsp_must_staple -> false