GPO for DisableEncryptedClientHello and PostQuantumKeyAgreementEnabled

diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml
index 867cb893cca25a79ad6b1e6f85d3b3d7a92465b6..4fc9823fbe2325349aa03ff8808a433e8359eb0e 100644 (file)
--- a/windows/de-DE/firefox.adml
+++ b/windows/de-DE/firefox.adml
@@ -1103,6 +1103,14 @@ Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, werden
 Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, ist die Übersetzung von Webseiten verfügbar.
 
 Hinweis: Die Übersetzung von Webseiten erfolgt vollständig auf dem Client, um den Datenschutz zu gewährleisten.</string>
 Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, ist die Übersetzung von Webseiten verfügbar.
 
 Hinweis: Die Übersetzung von Webseiten erfolgt vollständig auf dem Client, um den Datenschutz zu gewährleisten.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt.
 
 Für eine Beschreibung der Einstellung, siehe:
       <string id="Preferences_Boolean_Explain">Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt.
 
 Für eine Beschreibung der Einstellung, siehe:

diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml
index 38cbfdc725b8dca59d574b552c31980a738c5560..53edd1ca13fab04020494e7786f14302562d460f 100644 (file)
--- a/windows/en-US/firefox.adml
+++ b/windows/en-US/firefox.adml
@@ -1098,6 +1098,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false.
 
 For a description of the preference, see:
       <string id="Preferences_Boolean_Explain">If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false.
 
 For a description of the preference, see:

diff --git a/windows/es-ES/firefox.adml b/windows/es-ES/firefox.adml
index 64002b0fdc0b0f53d8321a1f1bbfc11105903cd2..986d5c67296812dcbd0492a1bdd9baf23a4239cb 100644 (file)
--- a/windows/es-ES/firefox.adml
+++ b/windows/es-ES/firefox.adml
@@ -1100,6 +1100,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false.
 
 Para una descripción de la preferencia, visita:
       <string id="Preferences_Boolean_Explain">Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false.
 
 Para una descripción de la preferencia, visita:

diff --git a/windows/firefox.admx b/windows/firefox.admx
index f4b7f429ba71a0d004bf4b06f1c2d8a4dc2340d7..2fca204af503102a7a29b6fa2e5ebf1526cd580c 100644 (file)
--- a/windows/firefox.admx
+++ b/windows/firefox.admx
@@ -4215,5 +4215,25 @@
         <decimal value="0"/>
       </disabledValue>
     </policy>
         <decimal value="0"/>
       </disabledValue>
     </policy>

+    <policy name="DisableEncryptedClientHello" class="Both" displayName="$(string.DisableEncryptedClientHello)" explainText="$(string.DisableEncryptedClientHello_Explain)" key="Software\Policies\Mozilla\Firefox" valueName="DisableEncryptedClientHello">
+      <parentCategory ref="firefox"/>
+      <supportedOn ref="SUPPORTED_FF127_ONLY"/>
+      <enabledValue>
+        <decimal value="1"/>
+      </enabledValue>
+      <disabledValue>
+        <decimal value="0"/>
+      </disabledValue>
+    </policy>
+    <policy name="PostQuantumKeyAgreementEnabled" class="Both" displayName="$(string.PostQuantumKeyAgreementEnabled)" explainText="$(string.PostQuantumKeyAgreementEnabled_Explain)" key="Software\Policies\Mozilla\Firefox" valueName="PostQuantumKeyAgreementEnabled">
+      <parentCategory ref="firefox"/>
+      <supportedOn ref="SUPPORTED_FF127_ONLY"/>
+      <enabledValue>
+        <decimal value="1"/>
+      </enabledValue>
+      <disabledValue>
+        <decimal value="0"/>
+      </disabledValue>
+    </policy>

   </policies>
 </policyDefinitions>
   </policies>
 </policyDefinitions>

diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml
index 1e6600e3ed59a49930e350621bf13747e5b77884..745333a692214b0925f5564bcc83461c8d246faf 100644 (file)
--- a/windows/fr-FR/firefox.adml
+++ b/windows/fr-FR/firefox.adml
@@ -1099,6 +1099,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false.
 
 Pour une description de la préférence, voir:
       <string id="Preferences_Boolean_Explain">Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false.
 
 Pour une description de la préférence, voir:

diff --git a/windows/it-IT/firefox.adml b/windows/it-IT/firefox.adml
index 5d871ecaa8255f5d3fed8107f8e337ce8330853b..d63dee99e574eef04df790046628c8fa90327b9a 100644 (file)
--- a/windows/it-IT/firefox.adml
+++ b/windows/it-IT/firefox.adml
@@ -1101,6 +1101,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile.
 
 Per una descrizione della preferenza, si veda:
       <string id="Preferences_Boolean_Explain">Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile.
 
 Per una descrizione della preferenza, si veda:

diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml
index 4f494b4fa1834479e429840ff28259191a7ea60b..860899e7033d07bc7e66d478baf05656be8a38bb 100644 (file)
--- a/windows/ru-RU/firefox.adml
+++ b/windows/ru-RU/firefox.adml
@@ -1101,6 +1101,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false.
 
 Описание предпочтения см.:
       <string id="Preferences_Boolean_Explain">Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false.
 
 Описание предпочтения см.:

diff --git a/windows/zh-CN/firefox.adml b/windows/zh-CN/firefox.adml
index a77f40cfaa659190a9e1d9da6c7d47ae7322d2b3..536d72b8503a43cc67c70287e3d99f9e8d2c0582 100644 (file)
--- a/windows/zh-CN/firefox.adml
+++ b/windows/zh-CN/firefox.adml
@@ -1100,6 +1100,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">若启用此原则，偏好设定将锁定为 true。 若禁用此原则，偏好设定则锁定为false。
 
 若需要偏好设置的详细说明，请参考：
       <string id="Preferences_Boolean_Explain">若启用此原则，偏好设定将锁定为 true。 若禁用此原则，偏好设定则锁定为false。
 
 若需要偏好设置的详细说明，请参考：

diff --git a/windows/zh-TW/firefox.adml b/windows/zh-TW/firefox.adml
index 4e0d19c0bccafd286a5c9fe5fad6967ede9e2a4f..8e284d502ce783b065b117a7e9513eafea2b2384 100644 (file)
--- a/windows/zh-TW/firefox.adml
+++ b/windows/zh-TW/firefox.adml
@@ -1098,6 +1098,14 @@ If this policy is enabled or not configured, payment methods will be autofilled
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>
 If this policy is enabled or not configured, web page translation will be available.
 
 Note: Web page translation is done completely on the client, so there is no data or privacy risk.</string>

+      <string id="DisableEncryptedClientHello">Disable Encrypted Client Hello</string>
+      <string id="DisableEncryptedClientHello_Explain">If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled.
+
+If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled.</string>
+      <string id="PostQuantumKeyAgreementEnabled">Enable post-quantum key agreement</string>
+      <string id="PostQuantumKeyAgreementEnabled_Explain">If this policy is enabled, post-quantum key agreement for TLS will be enabled.
+
+If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled.</string>

       <string id="Preferences_Boolean_Explain">若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。
 
 若需要偏好設定的詳細說明，請參考：
       <string id="Preferences_Boolean_Explain">若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。
 
 若需要偏好設定的詳細說明，請參考：