V-251577
CAT IIFirefox must be configured so that DNS over HTTPS is disabled.
- Ships Affected
- 1
- Total Findings
- 4
- Open
- 0
- Closed
- 4
Check Text
Type "about:policies" in the browser address bar.
If "DNSOverHTTPS" is not displayed under Policy Name or the Policy Value does not have "Enabled" with a value of "false", this is a finding.
Fix Text
Windows group policy:
1. Open the group policy editor tool with "gpedit.msc".
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\DNS Over HTTPS
Policy Name: Enabled
Policy State: Disabled
macOS "plist" file:
<key>DNSOverHTTPS</key>
<dict>
<key>Enabled</key>
<false/>
Linux "policies.json" file:
Add the following in the policies section:
"DNSOverHTTPS": {"Enabled": false}
STIG Reference
- STIG
- Mozilla Firefox Security Technical Implementation Guide
- Version
- 6
- Release
- 7
- Rule ID
- SV-251577r960963_rule
All Occurrences
This vulnerability appears on 1 ship(s)
| Ship | Hull # | Source File | Status | Assigned To | Scan Date | Actions |
|---|---|---|---|---|---|---|
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89134_Firefox_V6R6_20251217-201244.ckl | Unassigned | 2026-03-04T15:25:41.899130 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | MONT-SW-89108_Firefox_V6R6_20251217-203042.ckl | Unassigned | 2026-03-04T15:25:15.868210 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92010/Checklist/MONT-WS-92010_Firefox_V6R6_20251023-141154.ckl | Unassigned | 2026-01-14T12:57:27.870047 | View in Context | |
| USNS MONTFORD POINT | T-ESD-1 | _Reviewed/MONT-WS-92040/Checklist/MONT-WS-92040_Firefox_V6R6_20251023-142444.ckl | Unassigned | 2026-01-14T12:57:25.596878 | View in Context |