feat: Update and significantly improve/expand upon Mozilla's built-in certificate pinning

Signed-off-by: celenity <celenity@celenity.dev>
This commit is contained in:
celenity
2025-04-21 15:57:48 -04:00
parent 0809b6367d
commit a3d8e73c75
2 changed files with 2219 additions and 0 deletions

View File

File diff suppressed because it is too large Load Diff

View File

@@ -279,6 +279,14 @@ patches:
category: "Privacy"
# Security
- file: "certificate-pinning.patch"
name: "Certificate Pinning"
description: |
Updates and heavily expands/improves upon Mozilla's built-in certificate pinning.
reason: "To protect against MITM attacks by restricting which certificate authorities can issue valid certificates for included websites. Example of a real-world attack that this protects against: https://blog.mozilla.org/security/2011/08/29/fraudulent-google-com-certificate/"
effect: "Users are provided with a significantly more secure browsing experience and a better peace of mind."
category: "Security"
- file: "configure-safe-browsing.patch"
name: "Configure Safe Browsing"
description: |