From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Thu, 23 Apr 2020 20:56:39 +0000 (-0500) Subject: Merge pull request #585 from mozilla/DisabledCiphers X-Git-Tag: v1.16~3 X-Git-Url: https://git.p6c8.net/policy-templates.git/commitdiff_plain/426f88e4358468dbaa352171dbc1ff4ff336771f?ds=inline;hp=-c Merge pull request #585 from mozilla/DisabledCiphers Initial checkin of new policy DisabledCiphers --- 426f88e4358468dbaa352171dbc1ff4ff336771f diff --combined README.md index 7152523,f572339..089b93c --- a/README.md +++ b/README.md @@@ -23,6 -23,7 +23,7 @@@ Policies can be specified using the Gro | **[`DisableMasterPasswordCreation`](#disablemasterpasswordcreation)** | Remove the master password functionality. | **[`DisableAppUpdate`](#disableappupdate)** | Turn off application updates. | **[`DisableBuiltinPDFViewer`](#disablebuiltinpdfviewer)** | Disable the built in PDF viewer. + | **[`DisabledCiphers`](#disabledciphers)** | Disable ciphers. | **[`DisableDefaultBrowserAgent`](#disabledefaultbrowseragent)** | Prevent the default browser agent from taking any actions (Windows only). | **[`DisableDeveloperTools`](#disabledevelopertools)** | Remove access to all developer tools. | **[`DisableFeedbackCommands`](#disablefeedbackcommands)** | Disable the menus for reporting sites. @@@ -690,6 -691,69 +691,69 @@@ Software\Policies\Mozilla\Firefox\Disab } } ``` + ### DisabledCiphers + Disable specific cryptographic ciphers. + + **Compatibility:** Firefox 68.8, Firefox ESR 76\ + **CCK2 Equivalent:** N/A\ + **Preferences Affected:** N/A + + #### Windows (GPO) + ``` + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_DHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_128_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_AES_256_CBC_SHA = 0x1 | 0x0 + Software\Policies\Mozilla\Firefox\DisabledCiphers\TLS_RSA_WITH_3DES_EDE_CBC_SHA = 0x1 | 0x0 + ``` + #### macOS + ``` + + DisabledCiphers + + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + | + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + | + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + | + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + | + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + | + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + | + TLS_RSA_WITH_AES_128_CBC_SHA + | + TLS_RSA_WITH_AES_256_CBC_SHA + | + TLS_RSA_WITH_3DES_EDE_CBC_SHA + | + + + ``` + #### policies.json + ``` + { + "policies": { + "DisabledCiphers" { + "TLS_DHE_RSA_WITH_AES_128_CBC_SHA": true | false, + "TLS_DHE_RSA_WITH_AES_256_CBC_SHA": true | false, + "TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA": true | false, + "TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA": true | false, + "TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256": true | false, + "TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256": true | false, + "TLS_RSA_WITH_AES_128_CBC_SHA": true | false, + "TLS_RSA_WITH_AES_256_CBC_SHA": true | false, + "TLS_RSA_WITH_3DES_EDE_CBC_SHA": true | false + } + } + } + ``` ### DisableDefaultBrowserAgent Prevent the default browser agent from taking any actions. Only applicable to Windows; other platforms don’t have the agent. @@@ -2117,11 -2181,9 +2181,11 @@@ Set permissions associated with camera `Locked` prevents the user from changing preferences for the feature. -**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6\ +`Default` specifies the default value for Autoplay. block-audio-video is not supported on Firefox ESR 68. + +**Compatibility:** Firefox 62, Firefox ESR 60.2 (Autoplay added in Firefox 74, Firefox ESR 68.6, Autoplay Default/Locked added in Firefox 76, Firefox ESR 68.8)\ **CCK2 Equivalent:** N/A\ -**Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification` +**Preferences Affected:** `permissions.default.camera`,`permissions.default.microphone`,`permissions.default.geo`,`permissions.default.desktop-notification`,`media.autoplay.default` #### Windows (GPO) ``` @@@ -2144,8 -2206,6 +2208,8 @@@ Software\Policies\Mozilla\Firefox\Permi Software\Policies\Mozilla\Firefox\Permissions\Notifications\Locked = 0x1 | 0x0 Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Allow\1 = "https://example.org" Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Block\1 = "https://example.edu" +Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Default = "allow-audio-video" | "block-audio" | "block-audio-video" +Software\Policies\Mozilla\Firefox\Permissions\Autoplay\Locked = 0x1 | 0x0 ``` #### macOS ``` @@@ -2164,9 -2224,9 +2228,9 @@@ https://example.edu BlockNewRequests - + | Locked - + | Microphone @@@ -2179,9 -2239,9 +2243,9 @@@ https://example.edu BlockNewRequests - + | Locked - + | Location @@@ -2194,9 -2254,9 +2258,9 @@@ https://example.edu BlockNewRequests - + | Locked - + | Notifications @@@ -2223,10 -2283,6 +2287,10 @@@ https://example.edu + Default + allow-audio-video | block-audio | block-audio-video + Locked + | @@@ -2262,9 -2318,7 +2326,9 @@@ }, "Autoplay": { "Allow": ["https://example.org"], - "Block": ["https://example.edu"] + "Block": ["https://example.edu"], + "Default": "allow-audio-video" | "block-audio" | "block-audio-video", + "Locked": true | false } } } diff --combined mac/org.mozilla.firefox.plist index 3aa4b0f,ec4d852..17343d3 --- a/mac/org.mozilla.firefox.plist +++ b/mac/org.mozilla.firefox.plist @@@ -131,6 -131,27 +131,27 @@@ DisableBuiltinPDFViewer + DisabledCiphers + + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + + TLS_RSA_WITH_AES_128_CBC_SHA + + TLS_RSA_WITH_AES_256_CBC_SHA + + TLS_RSA_WITH_3DES_EDE_CBC_SHA + + DisableDeveloperTools DisableFeedbackCommands @@@ -377,10 -398,6 +398,10 @@@ https://example.edu + Default + block-audio + Locked + PopupBlocking diff --combined windows/de-DE/firefox.adml index 9ca80fc,6b2aa39..c9b7b18 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ Suche Einstellungen Benutzer-Benachrichtigungen + Disabled Ciphers Erlaubte Seiten Gesperrte Seiten Automatisches Update @@@ -422,19 -423,6 +423,19 @@@ Wenn diese Richtlinieneinstellung deakt Wenn diese Richtlinieneinstellung aktiviert ist, ist die Automatische Wiedergabe für die genannten Quellen immer deaktiviert. Wenn diese Richtlinieneinstellung deaktiviert oder nicht konfiguriert, wird die Standardeinstellung zur Automatischen Wiedergabe von Medien befolgt. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video Firefox Home anpassen Wenn diese Richtlinieneinstellung aktiviert ist, können die Sektionen festgelegt werden, die der Anwender sieht und der Anwender kann diese nicht mehr anpassen. @@@ -721,6 -709,42 +722,42 @@@ Wenn diese Richtlinie aktiviert oder ni Wenn diese Richtlinieneinstellung deaktiviert ist, werden basierend darauf, was der Benutzer in die Adressleiste eingibt, keine Aktionen empfohlen. Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, werden Aktionen empfohlen, die darauf basieren, was der Benutzer in die Adressleiste eingibt. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: @@@ -1019,9 -1043,6 +1056,9 @@@ https://github.com/mozilla/policy-templ + + + diff --combined windows/en-US/firefox.adml index 6458473,c44ba4f..7c5dae1 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ Search Preferences User Messaging + Disabled Ciphers Allowed Sites Blocked Sites Application Autoupdate @@@ -422,19 -423,6 +423,19 @@@ If this policy is disabled or not confi If this policy is enabled, autoplay is always blocked for the origins indicated. If this policy is disabled or not configured, the default autoplay policy is followed. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video Customize Firefox Home If this policy is enabled, you can choose the sections displayed on Firefox Home and prevent the user from changing them. @@@ -723,6 -711,42 +724,42 @@@ If this policy is enabled or not config If this policy is disabled, actions will not be recommended based on what the user types in the URL bar. If this policy is enabled or not configured, actions will be recommended based on what the user types in the URL bar. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@@ -1020,9 -1044,6 +1057,9 @@@ https://github.com/mozilla/policy-templ + + + diff --combined windows/es-ES/firefox.adml index 5c9d896,b52ea67..9bed40a --- a/windows/es-ES/firefox.adml +++ b/windows/es-ES/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ Búsqueda Preferencias User Messaging + Disabled Ciphers Sitios permitidos Sitios bloqueados Application Autoupdate @@@ -422,19 -423,6 +423,19 @@@ Si esta política está deshabilitada Si esta política está habilitada, la reproducción automática siempre se bloqueará para los orígenes indicados. Si esta política está deshabilitada o no está configurada, se seguirá la política predeterminada de reproducción automática. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video Personalizar inicio de Firefox Si esta política está habilitada, podrá elegir las secciones que se muestran en la página de inicio de Firefox e impedir que el usuario las cambie. @@@ -723,6 -711,42 +724,42 @@@ If this policy is enabled or not config If this policy is disabled, actions will not be recommended based on what the user types in the URL bar. If this policy is enabled or not configured, actions will be recommended based on what the user types in the URL bar. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false. Para una descripción de la preferencia, visite: @@@ -1020,9 -1044,6 +1057,9 @@@ https://github.com/mozilla/policy-templ + + + diff --combined windows/firefox.admx index 6a007d9,f18d859..77ed391 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@@ -97,6 -97,9 +97,9 @@@ + + + @@@ -478,39 -481,6 +481,39 @@@ + + + + + + + + + + + + + + + + + + allow-audio-video + + + + + block-audio + + + + + block-audio-video + + + + + @@@ -3430,5 -3400,95 +3433,95 @@@ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + diff --combined windows/fr-FR/firefox.adml index a684fbc,c951f80..fcb3504 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ Recherche Préférences User Messaging + Disabled Ciphers Sites autorisés Sites bloqués Application Autoupdate @@@ -422,19 -423,6 +423,19 @@@ If this policy is disabled or not confi If this policy is enabled, autoplay is always blocked for the origins indicated. If this policy is disabled or not configured, the default autoplay policy is followed. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video Customize Firefox Home If this policy is enabled, you can choose the sections displayed on Firefox Home and prevent the user from changing them. @@@ -723,6 -711,42 +724,42 @@@ If this policy is enabled or not config If this policy is disabled, actions will not be recommended based on what the user types in the URL bar. If this policy is enabled or not configured, actions will be recommended based on what the user types in the URL bar. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: @@@ -1020,9 -1044,6 +1057,9 @@@ https://github.com/mozilla/policy-templ + + + diff --combined windows/it-IT/firefox.adml index 50bc666,b46d4be..4e5d70b --- a/windows/it-IT/firefox.adml +++ b/windows/it-IT/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ Ricerca Preferenze Messaggi utente + Disabled Ciphers Siti consentiti Siti bloccati Aggiornamento automatico applicazione @@@ -422,19 -423,6 +423,19 @@@ Se questo criterio è disabilitato o no Se questo criterio è abilitato, la riproduzione automatica sarà sempre bloccata per le origini indicate. Se questo criterio è disabilitato o non configurato, viene seguito il criterio predefinito per la riproduzione automatica. + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video Personalizza pagina iniziale di Firefox Se questo criterio è abilitato, è possibile scegliere le sezioni visualizzate nella pagina iniziale di Firefox e impedire all'utente di modificarle. @@@ -723,6 -711,42 +724,42 @@@ Se questo criterio è abilitato o non c Se questo criterio è disabilitato, non saranno consigliate azioni basate su quanto l'utente ha digitato nella barra degli indirizzi. Se questo criterio è abilitato o non configurato, saranno consigliate azioni basate su quanto l'utente ha digitato nella barra degli indirizzi. + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile. Per una descrizione della preferenza, si veda: @@@ -1020,9 -1044,6 +1057,9 @@@ https://github.com/mozilla/policy-templ + + + diff --combined windows/zh-TW/firefox.adml index e38eb94,7c07f39..b1da63f --- a/windows/zh-TW/firefox.adml +++ b/windows/zh-TW/firefox.adml @@@ -45,6 -45,7 +45,7 @@@ 搜尋 偏好設定 顯示給使用者的訊息 + Disabled Ciphers 允許的網站 封鎖的網站 應用程式自動更新 @@@ -420,19 -421,6 +421,19 @@@ Mozilla 建議您不要停用 Telemetry 若啟用此原則,將永遠針對指定的來源封鎖自動播放。 若停用或不設定此原則,將遵循預設自動播放原則。 + Default autoplay level + If this policy is enabled, you can choose the default autoplay level. + +If this policy is disabled or not configured, audio is blocked by default. + +Note: Blocking audio and video does not work on the ESR. + Do not allow preferences to be changed + If this policy is enabled, autoplay preferences cannot be changed by the user. + +If this policy is disabled or not configured, the user can change autoplay preferences. + Allow Audio and Video + Block Audio + Block Audio and Video 自訂 Firefox 首頁 若啟用此原則,將可以設定要在 Firefox 首頁顯示哪些段落,並防止使用者更改設定。 @@@ -721,6 -709,42 +722,42 @@@ 若停用此原則,將不會在使用者在網址列輸入時推薦操作行為。 若啟用或不設定此原則,則會根據使用者在網址列輸入的內容推薦操作行為。 + TLS_DHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_DHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_DHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 + If this policy is disabled, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is disabled. + + If this policy is enabled or not configured, the TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 cipher is enabled. + TLS_RSA_WITH_AES_128_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_128_CBC_SHA cipher is enabled. + TLS_RSA_WITH_AES_256_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_AES_256_CBC_SHA cipher is enabled. + TLS_RSA_WITH_3DES_EDE_CBC_SHA + If this policy is disabled, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is disabled. + + If this policy is enabled or not configured, the TLS_RSA_WITH_3DES_EDE_CBC_SHA cipher is enabled. 若啟用此原則,偏好設定將鎖定為 true。若停用此原則,偏好設定則鎖定為 false。 若需要偏好設定的詳細說明,請參考: @@@ -1018,9 -1042,6 +1055,9 @@@ https://github.com/mozilla/policy-templ + + +