Security/DNS Over HTTPS/Heuristics: Difference between revisions

Jump to navigation Jump to search
add links for third-party roots section
(clean intro more)
(add links for third-party roots section)
Line 26: Line 26:


We look at all certs in the cert database and check if any of them are not "built-in". If such certs are present, we disable DoH.
We look at all certs in the cert database and check if any of them are not "built-in". If such certs are present, we disable DoH.
See also:
# https://searchfox.org/mozilla-central/rev/1b95a0179507a4dc7d4b0c94c2df420dc1a72885/security/manager/ssl/nsIX509CertDB.idl#329
# https://searchfox.org/mozilla-central/rev/1b95a0179507a4dc7d4b0c94c2df420dc1a72885/security/manager/ssl/nsIX509Cert.idl#47


== Enterprise Policies ==
== Enterprise Policies ==
63

edits

Navigation menu