From 62f431dcf0f5bad75259727d3464c0797bcb9d3c Mon Sep 17 00:00:00 2001 From: Michael Kaply <345868+mkaply@users.noreply.github.com> Date: Tue, 18 Jun 2024 14:35:18 -0400 Subject: [PATCH 1/1] GPO for DisableEncryptedClientHello and PostQuantumKeyAgreementEnabled --- windows/de-DE/firefox.adml | 8 ++++++++ windows/en-US/firefox.adml | 8 ++++++++ windows/es-ES/firefox.adml | 8 ++++++++ windows/firefox.admx | 20 ++++++++++++++++++++ windows/fr-FR/firefox.adml | 8 ++++++++ windows/it-IT/firefox.adml | 8 ++++++++ windows/ru-RU/firefox.adml | 8 ++++++++ windows/zh-CN/firefox.adml | 8 ++++++++ windows/zh-TW/firefox.adml | 8 ++++++++ 9 files changed, 84 insertions(+) diff --git a/windows/de-DE/firefox.adml b/windows/de-DE/firefox.adml index 867cb89..4fc9823 100644 --- a/windows/de-DE/firefox.adml +++ b/windows/de-DE/firefox.adml @@ -1103,6 +1103,14 @@ Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, werden Wenn diese Richtlinieneinstellung aktiviert oder nicht konfiguriert ist, ist die Übersetzung von Webseiten verfügbar. Hinweis: Die Übersetzung von Webseiten erfolgt vollständig auf dem Client, um den Datenschutz zu gewährleisten. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. Wenn diese Richtlinieneinstellung aktiviert ist, ist die Einstellung auf true gesperrt. Wenn diese Richtlinieneinstellung deaktiviert ist, ist die Einstellung auf false gesperrt. Für eine Beschreibung der Einstellung, siehe: diff --git a/windows/en-US/firefox.adml b/windows/en-US/firefox.adml index 38cbfdc..53edd1c 100644 --- a/windows/en-US/firefox.adml +++ b/windows/en-US/firefox.adml @@ -1098,6 +1098,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. If this policy is enabled, the preference is locked to true. If this policy is disabled, the preference is locked to false. For a description of the preference, see: diff --git a/windows/es-ES/firefox.adml b/windows/es-ES/firefox.adml index 64002b0..986d5c6 100644 --- a/windows/es-ES/firefox.adml +++ b/windows/es-ES/firefox.adml @@ -1100,6 +1100,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. Si esta política está habilitada, la preferencia se bloquea en true. Si esta política está deshabilitada, la preferencia está bloqueada en false. Para una descripción de la preferencia, visita: diff --git a/windows/firefox.admx b/windows/firefox.admx index f4b7f42..2fca204 100644 --- a/windows/firefox.admx +++ b/windows/firefox.admx @@ -4215,5 +4215,25 @@ + + + + + + + + + + + + + + + + + + + + diff --git a/windows/fr-FR/firefox.adml b/windows/fr-FR/firefox.adml index 1e6600e..745333a 100644 --- a/windows/fr-FR/firefox.adml +++ b/windows/fr-FR/firefox.adml @@ -1099,6 +1099,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. Si cette stratégie est activée, la préférence est verrouillée sur true. Si cette stratégie est désactivée, la préférence est verrouillée sur false. Pour une description de la préférence, voir: diff --git a/windows/it-IT/firefox.adml b/windows/it-IT/firefox.adml index 5d871ec..d63dee9 100644 --- a/windows/it-IT/firefox.adml +++ b/windows/it-IT/firefox.adml @@ -1101,6 +1101,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. Se questo criterio è abilitato, la preferenza è impostata a Vero e resa non modificabile. Se questo criterio è disabilitato, la preferenza è impostata a Falso e resa non modificabile. Per una descrizione della preferenza, si veda: diff --git a/windows/ru-RU/firefox.adml b/windows/ru-RU/firefox.adml index 4f494b4..860899e 100644 --- a/windows/ru-RU/firefox.adml +++ b/windows/ru-RU/firefox.adml @@ -1101,6 +1101,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. Если эта политика включена, предпочтение заблокировано на true. Если эта политика отключена, предпочтение заблокировано на false. Описание предпочтения см.: diff --git a/windows/zh-CN/firefox.adml b/windows/zh-CN/firefox.adml index a77f40c..536d72b 100644 --- a/windows/zh-CN/firefox.adml +++ b/windows/zh-CN/firefox.adml @@ -1100,6 +1100,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. 若启用此原则，偏好设定将锁定为 true。 若禁用此原则，偏好设定则锁定为false。 若需要偏好设置的详细说明，请参考： diff --git a/windows/zh-TW/firefox.adml b/windows/zh-TW/firefox.adml index 4e0d19c..8e284d5 100644 --- a/windows/zh-TW/firefox.adml +++ b/windows/zh-TW/firefox.adml @@ -1098,6 +1098,14 @@ If this policy is enabled or not configured, payment methods will be autofilled If this policy is enabled or not configured, web page translation will be available. Note: Web page translation is done completely on the client, so there is no data or privacy risk. + Disable Encrypted Client Hello + If this policy is enabled, the TLS feature Encrypted Client Hello (ECH) will be disabled. + +If this policy is disabled or not configured, the TLS feature Encrypted Client Hello (ECH) will be enabled. + Enable post-quantum key agreement + If this policy is enabled, post-quantum key agreement for TLS will be enabled. + +If this policy is disabled or not configured, post-quantum key agreement for TLS will be disabled. 若啟用此原則，偏好設定將鎖定為 true。若停用此原則，偏好設定則鎖定為 false。 若需要偏好設定的詳細說明，請參考： -- 2.34.1