Use HTTPS mode by default, clean up plugins

firefox/README.md

@@ -8,28 +8,19 @@ Based on [https://www.privacy-handbuch.de/handbuch_21.htm](https://www.privacy-h
 
 ## Recommended extensions
 
+Besides Firefox integrated anti-tracking mechanisms, it's still advised to install additional plugins to further enhance this.
 
-```
+* `uBlock Origin`: blocks ads and unwanted trackers
-uBlock Origin (ads)
+* `Neat url`: removes common parameters from pages (e.g. to identify you with something like `?os=windows&browser=chrome&version=86`)
+* `Skip Redirect`: skips not needed redirects of pages
+* `CanvasBlocker`: disallows canvas fingerprinting which would be able to identify your unique browser, heavily used in some JavaScript (web) APIs
+* (optional and might lead to disfunction): `Cookie AutoDelete`: automatically deletes cookies during a session
 
-HTTPZ or HTTPS Everywhere (automatically redirect to the Secure version of a website)
+**More**:
+* Use a password manager and don't store or synchronize your passwords within internal browser functionality, e.g. `KeePassXC`
+* Use `Invidious` instances for a liberated YouTube experience (a proxy to YouTube)
 
-Neat url // removes common parameters from pages (e.g. to identify you with something like ?os=windows&....)
+**Hint**: All extensions, especially extensions interferring in redirects and cookies like `Skip Redirect` or `Cookie Autodelete` _might_ lead to malfunctioning of some websites, e.g. websites not redirecting correctly or not being able to store cookies. _It's recommended to disable them per page if you notice something's not working as expected_!
-
-Skip Redirect // skips not needed redirects of pages
-
-CanvasBlocker // for some JavaScript (web) API
-
-Cookie AutoDelete // automatically delete cookies
-
-(an extension for a passwordmanager like KeePassXC if needed)
-
-(Use Invidious instances for a liberated YouTube experience)
-
-(Greasemonkey to get rid of some annoying popups, see below)
-```
-
-All extensions, especially extensions interferring in redirects like `Skip Redirect` _might_ lead to malfunctioning of some websites. Disable it per page.
 
 You can **hide extension icons** in the overflow menu if you like. Just right click the icon in the top right in the menu bar and "pin to overflow".
 
@@ -37,10 +28,6 @@ You can **hide extension icons** in the overflow menu if you like. Just right cl
 
 For the uBlock plugin import the `ublock-config-1.txt` in the "My Filter" menu for proper settings.
 
-### Remove Google and YouTube popups
-
-Recently, Google added popups on YT and search so you need to login. In the Greasemonkey extension, import the `greasemonkey.zip` in this git repository and they should be gone.
-
 ## Recommended search engines
 
 If not possible in another way, you can add them via [Add custom search engine](https://addons.mozilla.org/en-US/firefox/addon/add-custom-search-engine/). Just follow instructions after installing and opening the extension.
@@ -53,6 +40,8 @@ https://www.qwant.com/?q=%s&r=DE&sr=de&l=en_gb&h=1&s=0&a=1&b=1&vt=0&hc=0&smartNe
 https://duckduckgo.com/?q=%s&ks=l&kav=1&kn=1&kp=-2&kak=-1&kax=-1&kaq=-1&kao=-1&kau=-1&kaj=m&kam=google-maps&k1=-1&kae=c
 ```
 
+Be sure to add shortcuts to be used in your navigation bar, e.g. `@ddg` refers to DuckDuckGo search engine and directly issues searches to DuckDuckGo from the navigation bar.
+
 ## Recommended settings
 
 How to do it?

firefox/user.js

@@ -88,7 +88,8 @@ user_pref("dom.gamepad.enabled", false);
 //user_pref("dom.push.connection.enabled", false);
 //user_pref("dom.push.enabled", false);
 //user_pref("dom.push.serverURL", "");
-//user_pref("dom.security.https_only_mode", true);
+user_pref("dom.security.https_only_mode", true);
+user_pref("dom.security.https_only_mode_ever_enabled", true);
 user_pref("dom.webnotifications.enabled", false);
 user_pref("extensions.blocklist.enabled", false);
 user_pref("extensions.formautofill.addresses.enabled", false);