Settings which break icloud.com

[CyBiS]

Hi,

this is a follow-up thread to #850 as unfortunately additional settings also break icloud.com for me.

As discussed in the previously mentiond issue, following configuration regarding network.http.referer.XOriginPolicy are necessary.

• Install the Smart Referer addon.
• Use the addon's strict mode, disable the whitelist, disable the rewrite mode and use following manual exceptions (source -> destination) in order for all iCloud apps to work:
  *.icloud.com -> *.apple.com
*.icloud.com -> *.icloud.com
• Configure network.http.referer.XOriginPolicy = 0.

Unfortunately additional configuration changes are necessary in order to get all the iCloud apps to work. Consider changing them only temporarily if you really need those apps.

• As iCloud Notes needs WebGL, following setting needs to be changed in addition (assuming webgl.disabled = false):
  webgl.min_capability_mode = false
• Unfortunately for iCloud Drive one of the subdomains seems to use the insecure SSL cipher suite TLS_RSA_WITH_AES_128_CBC_SHA which is vulnerable to the robot attack. Therefore the SSL safe regonition would need to be disabled:
  security.ssl.require_safe_negotiation = false

BR

[crssi]

Just out of curiosity...

1. Why set SR to strict and not lax?
2. How webgl.min_capability_mode = true works when webgl.disabled = true?

[CyBiS]

1. Why set SR to strict and not lax?

I'm using following base confiugration with some additional settings from this user.js here. Sorry for the confusion, I should have mentioned that. In that base configuration network.http.referer.XOriginPolicy = 2 is used, so the strict mode is what I'm looking for within Smart Referer.

2. How webgl.min_capability_mode = true works when webgl.disabled = true?

Thanks for the hint, the correct setting is of course webgl.min_capability_mode = false assuming that webgl.disabled = false which is true for the base config I'm using.

The purpose of this discussion is just to document the settings I had to use in order to get the iCloud page working. Might be useful to other users as well.