Firefox 95 enhances the browser's protection against malicious code

[South Park]

So, is the ESNI test at Cloudflare site no longer valid since the ESNI setting in FF95 no longer there?

That's correct. Even after I enabled the "experimental" ECH in about:config, the Cloudflare test fails the ESNI part.

 

[Sammo]

Firefox doesn't have encrypted SNI anymore. They use ECH: Encrypted Client Hello: the future of ESNI in Firefox – Mozilla Security Blog


Open the about:config settings in Firefox and try setting security.tls.version.max to 4 and security.tls.version.min to 3
Now Firefox only allows TLS v. 1.2 and 1.3
If the issue is actually related to your VPN then that's probably not the right solution.

I already did this and FF 95 still fails the Cloudflare test. I believe the issue is with Firefox and it's handling of DoH. If I deselect this option the TLS test passes.

 

[HarborFront]

I already did this and FF 95 still fails the Cloudflare test. I believe the issue is with Firefox and it's handling of DoH. If I deselect this option the TLS test passes.

Mine already pass the TLS 1.3 test at Cloudflare site.



If you are using uBO you need to allow some test sites to pass through



I did not enable DNS over HTTPS

 

[n8chavez]

Ok. two things....One, I solved my issue! And, two, I am an idiot! It never occurred to me that I might need to update my userchrome.css file. But that's what was causing the issue.

 

[Moonhorse]

Yeah...that's not right. For me Firefox is incredibly light. What extensions are you using with it?

Just bitwarden, it got fixed after browsing & went back to normal

And ESNI is long gone, i guess its because of quic development

 

[Sammo]

Mine already pass the TLS 1.3 test at Cloudflare site.

View attachment 262702

If you are using uBO you need to allow some test sites to pass through

View attachment 262703

I did not enable DNS over HTTPS

View attachment 262704

I disabled uBO and it still fails when DoH is enabled. I get the same result as you when I disable DoH.

 

[Kongo]

So, is the ESNI test at Cloudflare site no longer valid since the ESNI setting in FF95 no longer there?

Fore quite some time now, yeah...