>>>>> "RM" == Robert Marcano <robert@xxxxxxxxxxxxxxxxx> writes: RM> I wonder if the default setting for RM> network.negotiate-auth.trusted-uris=https:// is or isn't a leak. My understanding (from talking to npmccallum and ab/abbra at flock) is that the security and disclosure issues with that have been fixed to the satisfaction of the people who understand such things, and hence it was finally enabled by default in Firefox 48. - J< -- devel mailing list devel@xxxxxxxxxxxxxxxxxxxxxxx https://lists.fedoraproject.org/admin/lists/devel@xxxxxxxxxxxxxxxxxxxxxxx