1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
|
// rawnix default prefs for Thunderbird
// Installed to /usr/lib/thunderbird/defaults/pref/rawnix.js
// These are defaults: users can override them in about:config or prefs.js.
// Telemetry, studies, data reporting
pref("toolkit.telemetry.enabled", false);
pref("toolkit.telemetry.unified", false);
pref("toolkit.telemetry.archive.enabled", false);
pref("toolkit.telemetry.server", "data:,");
pref("toolkit.telemetry.newProfilePing.enabled", false);
pref("toolkit.telemetry.shutdownPingSender.enabled", false);
pref("toolkit.telemetry.firstShutdownPing.enabled", false);
pref("toolkit.telemetry.updatePing.enabled", false);
pref("toolkit.telemetry.bhrPing.enabled", false);
pref("toolkit.telemetry.coverage.opt-out", true);
pref("toolkit.coverage.opt-out", true);
pref("toolkit.coverage.endpoint.base", "");
pref("datareporting.healthreport.uploadEnabled", false);
pref("datareporting.policy.dataSubmissionEnabled", false);
pref("app.shield.optoutstudies.enabled", false);
pref("app.normandy.enabled", false);
pref("app.normandy.api_url", "");
pref("breakpad.reportURL", "");
// Start page, in-app notifications, default-client nag
pref("mailnews.start_page.enabled", false);
pref("mailnews.start_page.url", "about:blank");
pref("mailnews.start_page.override_url", "");
pref("mail.inappnotifications.enabled", false);
pref("mail.shell.checkDefaultClient", false);
// Account setup: don't send the full address to the ISP's autoconfig
// server, and only accept TLS configs. Keeps ISPDB lookup working.
pref("mailnews.auto_config.fetchFromISP.sendEmailAddress", false);
pref("mailnews.auto_config.ssl_only", true);
// Cloud/provider features
pref("mail.cloud_files.enabled", false);
pref("mail.provider.enabled", false);
// Message display: block remote content, render HTML as sanitized
// "Simple HTML" (View > Message Body As to change per user)
pref("mailnews.message_display.disable_remote_image", true);
pref("mailnews.display.html_as", 3);
pref("mailnews.display.disallow_mime_handlers", 3);
pref("mail.phishing.detection.enabled", true);
pref("network.IDN_show_punycode", true);
// Feeds: show the feed summary instead of loading the web page
pref("rss.show.content-base", 1);
// Outgoing headers: no User-Agent, no Content-Language,
// UTC Date rounded to the minute, generic EHLO
pref("mailnews.headers.sendUserAgent", false);
pref("mail.suppress_content_language", true);
pref("mail.sanitize_date_header", true);
pref("mail.smtpserver.default.hello_argument", "[127.0.0.1]");
// Never send read receipts
pref("mail.mdn.report.enabled", false);
// Compose in plain text by default (uncomment if wanted)
// pref("mail.identity.default.compose_html", false);
// Chat (IRC/Matrix/XMPP)
pref("mail.chat.enabled", false);
// Network: no prefetching or speculative connections
pref("network.prefetch-next", false);
pref("network.dns.disablePrefetch", true);
pref("network.predictor.enabled", false);
pref("network.http.speculative-parallel-limit", 0);
pref("network.captive-portal-service.enabled", false);
pref("network.connectivity-service.enabled", false);
// Safe Browsing: built without keys, so disable the lookups
pref("browser.safebrowsing.malware.enabled", false);
pref("browser.safebrowsing.phishing.enabled", false);
pref("browser.safebrowsing.downloads.enabled", false);
pref("browser.safebrowsing.downloads.remote.enabled", false);
// Add-on recommendations
pref("extensions.getAddons.showPane", false);
pref("extensions.htmlaboutaddons.recommendations.enabled", false);
// Attack surface a mail client doesn't need
pref("media.peerconnection.enabled", false);
pref("webgl.disabled", true);
pref("geo.enabled", false);
pref("geo.provider.network.url", "");
|