1 files changed, 90 insertions, 0 deletions
diff --git a/opt/thunderbird/rawnix.js b/opt/thunderbird/rawnix.js
new file mode 100644
index 0000000..6285d01
--- /dev/null
+++ b/opt/thunderbird/rawnix.js
@@ -0,0 +1,90 @@
+// rawnix default prefs for Thunderbird
+// Installed to /usr/lib/thunderbird/defaults/pref/rawnix.js
+// These are defaults: users can override them in about:config or prefs.js.
+
+// Telemetry, studies, data reporting
+pref("toolkit.telemetry.enabled", false);
+pref("toolkit.telemetry.unified", false);
+pref("toolkit.telemetry.archive.enabled", false);
+pref("toolkit.telemetry.server", "data:,");
+pref("toolkit.telemetry.newProfilePing.enabled", false);
+pref("toolkit.telemetry.shutdownPingSender.enabled", false);
+pref("toolkit.telemetry.firstShutdownPing.enabled", false);
+pref("toolkit.telemetry.updatePing.enabled", false);
+pref("toolkit.telemetry.bhrPing.enabled", false);
+pref("toolkit.telemetry.coverage.opt-out", true);
+pref("toolkit.coverage.opt-out", true);
+pref("toolkit.coverage.endpoint.base", "");
+pref("datareporting.healthreport.uploadEnabled", false);
+pref("datareporting.policy.dataSubmissionEnabled", false);
+pref("app.shield.optoutstudies.enabled", false);
+pref("app.normandy.enabled", false);
+pref("app.normandy.api_url", "");
+pref("breakpad.reportURL", "");
+
+// Start page, in-app notifications, default-client nag
+pref("mailnews.start_page.enabled", false);
+pref("mailnews.start_page.url", "about:blank");
+pref("mailnews.start_page.override_url", "");
+pref("mail.inappnotifications.enabled", false);
+pref("mail.shell.checkDefaultClient", false);
+
+// Account setup: don't send the full address to the ISP's autoconfig
+// server, and only accept TLS configs. Keeps ISPDB lookup working.
+pref("mailnews.auto_config.fetchFromISP.sendEmailAddress", false);
+pref("mailnews.auto_config.ssl_only", true);
+
+// Cloud/provider features
+pref("mail.cloud_files.enabled", false);
+pref("mail.provider.enabled", false);
+
+// Message display: block remote content, render HTML as sanitized
+// "Simple HTML" (View > Message Body As to change per user)
+pref("mailnews.message_display.disable_remote_image", true);
+pref("mailnews.display.html_as", 3);
+pref("mailnews.display.disallow_mime_handlers", 3);
+pref("mail.phishing.detection.enabled", true);
+pref("network.IDN_show_punycode", true);
+
+// Feeds: show the feed summary instead of loading the web page
+pref("rss.show.content-base", 1);
+
+// Outgoing headers: no User-Agent, no Content-Language,
+// UTC Date rounded to the minute, generic EHLO
+pref("mailnews.headers.sendUserAgent", false);
+pref("mail.suppress_content_language", true);
+pref("mail.sanitize_date_header", true);
+pref("mail.smtpserver.default.hello_argument", "[127.0.0.1]");
+
+// Never send read receipts
+pref("mail.mdn.report.enabled", false);
+
+// Compose in plain text by default (uncomment if wanted)
+// pref("mail.identity.default.compose_html", false);
+
+// Chat (IRC/Matrix/XMPP)
+pref("mail.chat.enabled", false);
+
+// Network: no prefetching or speculative connections
+pref("network.prefetch-next", false);
+pref("network.dns.disablePrefetch", true);
+pref("network.predictor.enabled", false);
+pref("network.http.speculative-parallel-limit", 0);
+pref("network.captive-portal-service.enabled", false);
+pref("network.connectivity-service.enabled", false);
+
+// Safe Browsing: built without keys, so disable the lookups
+pref("browser.safebrowsing.malware.enabled", false);
+pref("browser.safebrowsing.phishing.enabled", false);
+pref("browser.safebrowsing.downloads.enabled", false);
+pref("browser.safebrowsing.downloads.remote.enabled", false);
+
+// Add-on recommendations
+pref("extensions.getAddons.showPane", false);
+pref("extensions.htmlaboutaddons.recommendations.enabled", false);
+
+// Attack surface a mail client doesn't need
+pref("media.peerconnection.enabled", false);
+pref("webgl.disabled", true);
+pref("geo.enabled", false);
+pref("geo.provider.network.url", "");