diff --git a/user.js b/user.js
index 05316c9..8086134 100644
--- a/user.js
+++ b/user.js
@@ -89,6 +89,10 @@ user_pref("intl.accept_languages", "en-US, en");
 /* 0208: enforce US English locale regardless of the system locale
  * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=867501 ***/
 user_pref("javascript.use_us_english_locale", true); // (hidden pref)
+/* 0209: disable geolocation on non-secure origins (FF55+)
+ * [1] https://bugzilla.mozilla.org/show_bug.cgi?id=1072859
+ * [2] https://www.ghacks.net/2017/03/14/firefox-55-geolocation-requires-secure-origin/ ***/
+user_pref("geo.security.allowinsecure", false");
 
 /*** 0300: QUIET FOX [PART 1]
      No auto-phoning home for anything. You can still do manual updates. It is still important