Snippets Groups Projects

This is an archived project. Repository and other project resources are read-only.

Security configuration of Instantbird

Closed Issue created 11 years ago by Sukhbir Singh

~~Disable Instantbird's auto-updater and crash reporter~~
~~OTR is enabled by default and other non-OTR communication is disabled entirely~~
CA verification: TOFU? Pinning?
~~Disable older TLS/SSL suites~~
~~Ensure that all plugins are disabled (Java, Flash)~~
Ensure that there is a whitelist of the most popular Instantbird extensions that we have to check to see if they could introduce leaks

Linked items ... 0

Activity