arkenfox / user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
MIT License
9.43k stars 507 forks source link

ToDo: diffs FF125.0.1-FF126 #1842

Closed earthlng closed 1 month ago

earthlng commented 1 month ago

FF126 release date: May 14th 2024

FF126 release notes FF126 for developers FF126 security advisories


89 diffs ( 48 new, 24 gone, 17 different )

removed, renamed or hidden in v126.0:

changed in v126.0:


ignore

click me for details

==NEW ```js pref("browser.newtabpage.activity-stream.feeds.wallpaperfeed", true); pref("browser.newtabpage.activity-stream.newtabWallpapers.enabled", false); pref("browser.newtabpage.activity-stream.newtabWallpapers.wallpaper-dark", ""); pref("browser.newtabpage.activity-stream.newtabWallpapers.wallpaper-light", ""); pref("devtools.toolbox.splitconsole.enabled", true); pref("devtools.toolbox.splitconsole.open", false); pref("dom.events.textevent.enabled", false); pref("dom.fetchKeepalive.enabled", false); pref("dom.innerSize.rounding", 2); pref("dom.shadowdom.selection_across_boundary.enabled", false); pref("dom.text_fragments.enabled", false); pref("dom.webgpu.allow-present-without-readback", true); pref("dom.webnotifications.loglevel", "Error"); pref("gfx.canvas.remote.use-draw-image-fast-path", true); pref("gfx.remote-texture.recycle.disabled", false); pref("javascript.options.main_process_disable_jit", false); pref("layout.css.at-scope.enabled", false); pref("layout.css.basic-shape-shape.enabled", false); pref("layout.css.letter-spacing.model", 0); pref("layout.css.relative-color-syntax.enabled", false); pref("layout.css.starting-style-at-rules.enabled", false); pref("layout.css.video-dynamic-range.allows-high", false); pref("mathml.centered_operators.disabled", true); pref("mathml.top_bottom_spacing_for_stretchy_operators.disabled", true); pref("media.cubeb.input_drift_factor", "1.0"); pref("media.cubeb.output_drift_factor", "1.0"); pref("media.gmp-manager.allowLocalSources", true); pref("media.theora.enabled", true); pref("media.widevine.hdcp-protection-mask", true); pref("network.decompression_off_mainthread", true); pref("network.decompression_off_mainthread_min_size", 512); pref("network.dns.preferIPv6", false); pref("network.fetch.systemDefaultsToOmittingCredentials", true); pref("network.http.digest_auth_cnonce_length", 16); pref("network.http.http2.aggressive_coalescing", false); pref("network.http.priority_header.enabled", true); pref("network.url.simple_uri_schemes", ""); pref("network.url.some_schemes_bypass_defaultURI_fallback", true); pref("print.center_page_on_sheet", 2); pref("reader.colors_menu.enabled", false); pref("reader.custom_colors.background", ""); pref("reader.custom_colors.foreground", ""); pref("reader.custom_colors.selection-highlight", ""); pref("reader.custom_colors.unvisited-links", ""); pref("reader.custom_colors.visited-links", ""); pref("sidebar.revamp", false); pref("toolkit.contentRelevancy.enabled", false); pref("toolkit.telemetry.user_characteristics_ping.logLevel", "Warn"); ``` ==REMOVED, RENAMED or HIDDEN ```js pref("apz.drag.initial.enabled", true); pref("apz.force_disable_desktop_zooming_scrollbars", false); pref("apz.mvm.force-enabled", true); pref("browser.newtabpage.activity-stream.asrouter.providers.whats-new-panel", "{\"id\":\"whats-new-panel\",\"enabled\":false,\"type\":\"remote-settings\",\"collection\":\"whats-new-panel\",\"updateCycleInMs\":3600000}"); pref("corroborator.enabled", true); pref("devtools.command-button-splitconsole.enabled", true); pref("devtools.toolbox.splitconsoleEnabled", false); pref("dom.block_reload_from_resize_event_handler", false); pref("dom.innerSize.rounded", true); pref("dom.input.skip_cursor_move_for_same_value_set", true); pref("dom.webgpu.swap-chain.external-texture-dx12", false); pref("fission.preserve_browsing_contexts", true); pref("fission.remoteObjectEmbed", true); pref("layout.css.motion-path-basic-shapes.enabled", true); pref("layout.css.motion-path-coord-box.enabled", true); pref("layout.css.motion-path-offset-position.enabled", true); pref("layout.css.motion-path-ray.enabled", true); pref("prompts.contentPromptSubDialog", true); pref("prompts.modalType.httpAuth", 2); pref("prompts.tabChromePromptSubDialog", true); pref("prompts.windowPromptSubDialog", true); pref("sidebar.companion", false); pref("ui.-moz-autofill-background", "rgba(255, 249, 145, .5)"); ``` ==CHANGED ```js pref("browser.backup.enabled", true); // prev: false pref("browser.sessionstore.max_windows_undo", 5); // prev: 3 pref("browser.urlbar.yelp.minKeywordLength", 0); // prev: 5 pref("dom.disable_tab_focus_to_root_element", true); // prev: false pref("dom.element.customstateset.enabled", true); // prev: false pref("dom.screenwakelock.enabled", true); // prev: false pref("dom.security.setdocumenturi", true); // prev: false pref("gfx.webrender.overlay-vp-auto-hdr", true); // prev: false pref("gfx.webrender.overlay-vp-super-resolution", true); // prev: false pref("layout.css.prefixes.transforms", false); // prev: true pref("layout.css.prefixes.transitions", false); // prev: true pref("layout.css.zoom.enabled", true); // prev: false pref("network.http.accept-encoding.secure", "gzip, deflate, br, zstd"); // prev: "gzip, deflate, br" pref("pdfjs.enableHighlightEditor", true); // prev: false pref("reader.color_scheme.values", "[\"auto\",\"light\",\"dark\",\"sepia\",\"contrast\",\"gray\"]"); // prev: "[\"light\",\"dark\",\"sepia\",\"auto\"]" ```

earthlng commented 1 month ago
some bugzilla tickets

* apz.drag.initial.enabled Bug [1887515](https://bugzilla.mozilla.org/show_bug.cgi?id=1887515) - Remove the apz.drag.initial.enabled pref. * apz.force_disable_desktop_zooming_scrollbars Bug [1885705](https://bugzilla.mozilla.org/show_bug.cgi?id=1885705) - Remove the apz.force_disable_desktop_zooming_scrollbars pref. * apz.mvm.force-enabled Bug [1885708](https://bugzilla.mozilla.org/show_bug.cgi?id=1885708) - Remove apz.mvm.force-enabled pref * browser.backup.enabled Bug [1886174](https://bugzilla.mozilla.org/show_bug.cgi?id=1886174) - Let the BackupService initialize itself on all release channels. Bug [1885993](https://bugzilla.mozilla.org/show_bug.cgi?id=1885993) - Enable the BackupService initializer on Nightly by default. Bug [1882171](https://bugzilla.mozilla.org/show_bug.cgi?id=1882171) - Stub out the beginnings of the BackupService. * browser.messaging-system.whatsNewPanel.enabled Bug [1724300](https://bugzilla.mozilla.org/show_bug.cgi?id=1724300) - Remove What's New Panel, ToolbarPanelHub components & related tests & references * browser.newtabpage.activity-stream.asrouter.providers.whats-new-panel Bug [1724300](https://bugzilla.mozilla.org/show_bug.cgi?id=1724300) - Remove What's New Panel, ToolbarPanelHub components & related tests & references Bug [1839458](https://bugzilla.mozilla.org/show_bug.cgi?id=1839458) - Address undesired event pings from empty whats new panel provider * browser.newtabpage.activity-stream.newtabWallpapers.enabled Bug [1881588](https://bugzilla.mozilla.org/show_bug.cgi?id=1881588) - Add Wallpaper component * browser.newtabpage.activity-stream.newtabWallpapers.wallpaper-dark Bug [1893311](https://bugzilla.mozilla.org/show_bug.cgi?id=1893311) - Add two prefs for light/dark newtab wallpapers. * browser.newtabpage.activity-stream.newtabWallpapers.wallpaper-light Bug [1893311](https://bugzilla.mozilla.org/show_bug.cgi?id=1893311) - Add two prefs for light/dark newtab wallpapers. * browser.sessionstore.max_windows_undo Bug [1861555](https://bugzilla.mozilla.org/show_bug.cgi?id=1861555) - Change browser.sessionstore.max_windows_undo limit to 5 * browser.urlbar.clipboard.featureGate Bug [1894614](https://bugzilla.mozilla.org/show_bug.cgi?id=1894614) - Disable the clipboard suggestions in the address bar due to performance concerns. a=dmeehan Bug [1882478](https://bugzilla.mozilla.org/show_bug.cgi?id=1882478) - Enable clipboard suggestions feature in Release. Bug [1860548](https://bugzilla.mozilla.org/show_bug.cgi?id=1860548) - Enable the URL Paste Suggestion feature by default in Nightly. * browser.urlbar.yelp.minKeywordLength Bug [1890079](https://bugzilla.mozilla.org/show_bug.cgi?id=1890079) - Make the yelpMinKeywordLength Nimbus variable more useful. Bug [1881071](https://bugzilla.mozilla.org/show_bug.cgi?id=1881071): Stop suggest if the query length is less than length of when clicking 'Show less frequently' * corroborator.enabled Bug [1883452](https://bugzilla.mozilla.org/show_bug.cgi?id=1883452) - Obliterate Corroborator remaining bits. * devtools.command-button-splitconsole.enabled Bug [1731635](https://bugzilla.mozilla.org/show_bug.cgi?id=1731635) [devtools] Add option to disable split console * devtools.toolbox.splitconsole.enabled Bug [1731635](https://bugzilla.mozilla.org/show_bug.cgi?id=1731635) [devtools] Add option to disable split console * devtools.toolbox.splitconsole.open Bug [1731635](https://bugzilla.mozilla.org/show_bug.cgi?id=1731635) [devtools] Add option to disable split console * devtools.toolbox.splitconsoleEnabled Bug [1731635](https://bugzilla.mozilla.org/show_bug.cgi?id=1731635) [devtools] Add option to disable split console * dom.block_reload_from_resize_event_handler Bug [1853829](https://bugzilla.mozilla.org/show_bug.cgi?id=1853829) - Removed dom.block_reload_from_resize_event_handler pref. * dom.disable_tab_focus_to_root_element Bug [1886182](https://bugzilla.mozilla.org/show_bug.cgi?id=1886182) - Enable dom.disable_tab_focus_to_root_element in all channels Bug [1483828](https://bugzilla.mozilla.org/show_bug.cgi?id=1483828) - [Part 1] Disallow <tab> to move focus to root element * dom.element.customstateset.enabled Bug [1887543](https://bugzilla.mozilla.org/show_bug.cgi?id=1887543) - Enable CustomStateSet by default. Bug [1887467](https://bugzilla.mozilla.org/show_bug.cgi?id=1887467) - enable customstateset in nightlies * dom.events.textevent.enabled Bug [903746](https://bugzilla.mozilla.org/show_bug.cgi?id=903746) - part 1: Add `TextEvent` * dom.fetchKeepalive.enabled Bug [1871373](https://bugzilla.mozilla.org/show_bug.cgi?id=1871373) - Add keepalive attribute in Request.webidl. * dom.innerSize.rounded Bug [1889244](https://bugzilla.mozilla.org/show_bug.cgi?id=1889244) - Truncate rather than round inner sizes. * dom.innerSize.rounding Bug [1889244](https://bugzilla.mozilla.org/show_bug.cgi?id=1889244) - Truncate rather than round inner sizes. * dom.input.skip_cursor_move_for_same_value_set Bug [1880783](https://bugzilla.mozilla.org/show_bug.cgi?id=1880783) - Remove skip_cursor_move_for_same_value_set pref * dom.screenwakelock.enabled Bug [1874849](https://bugzilla.mozilla.org/show_bug.cgi?id=1874849) - Enable Screen Wake Lock API by default. Bug [1883724](https://bugzilla.mozilla.org/show_bug.cgi?id=1883724) - Disable Screen Wake Lock in release. * dom.security.setdocumenturi Bug [1889331](https://bugzilla.mozilla.org/show_bug.cgi?id=1889331) - Make dom.security.setdocumenturi enabled by default, * dom.shadowdom.selection_across_boundary.enabled Bug [1867058](https://bugzilla.mozilla.org/show_bug.cgi?id=1867058) - Part 3: Implement Selection.GetComposedRanges * dom.text_fragments.enabled Bug [1867939](https://bugzilla.mozilla.org/show_bug.cgi?id=1867939), part 1: Add FragmentDirective webidl and pref. * dom.webgpu.allow-present-without-readback Bug [1843891](https://bugzilla.mozilla.org/show_bug.cgi?id=1843891) - Enable to present WebGPU without readback with DX12 on Windows * dom.webgpu.swap-chain.external-texture-dx12 Bug [1843891](https://bugzilla.mozilla.org/show_bug.cgi?id=1843891) - Enable to present WebGPU without readback with DX12 on Windows * dom.webnotifications.loglevel Bug [1890329](https://bugzilla.mozilla.org/show_bug.cgi?id=1890329) - Use ConsoleInstance for logging * fission.preserve_browsing_contexts Bug [1888992](https://bugzilla.mozilla.org/show_bug.cgi?id=1888992) - Remove fission.preserve_browsing_contexts pref * fission.remoteObjectEmbed Bug [1887839](https://bugzilla.mozilla.org/show_bug.cgi?id=1887839) - Remove fission.remoteObjectEmbed pref * gfx.canvas.remote.use-draw-image-fast-path Bug [1888867](https://bugzilla.mozilla.org/show_bug.cgi?id=1888867) - Add a capability to diable fast path for remote Canvas with pref in CanvasRenderingContext2D::DrawImage * gfx.remote-texture.recycle.disabled Bug [1885490](https://bugzilla.mozilla.org/show_bug.cgi?id=1885490) - Add a capability to disable RemoteTexture recycling * gfx.webrender.overlay-vp-auto-hdr Bug [1891893](https://bugzilla.mozilla.org/show_bug.cgi?id=1891893) - Make Super Resolution and TrueHDR for video overlay to ride the train Bug [1882689](https://bugzilla.mozilla.org/show_bug.cgi?id=1882689) - Enable NVIDIA RTX Video TrueHDR in Nightly Bug [1882005](https://bugzilla.mozilla.org/show_bug.cgi?id=1882005) - Block VideoProcessor-HDR on SDR content depends on driver version * gfx.webrender.overlay-vp-super-resolution Bug [1891893](https://bugzilla.mozilla.org/show_bug.cgi?id=1891893) - Make Super Resolution and TrueHDR for video overlay to ride the train Bug [1882688](https://bugzilla.mozilla.org/show_bug.cgi?id=1882688) - Enable NVIDIA RTX Video Super Resolution in Nightly Bug [1882689](https://bugzilla.mozilla.org/show_bug.cgi?id=1882689) - Enable NVIDIA RTX Video TrueHDR in Nightly Bug [1883577](https://bugzilla.mozilla.org/show_bug.cgi?id=1883577) - Add error handling to Super Resolution setting * javascript.options.main_process_disable_jit Bug [1883457](https://bugzilla.mozilla.org/show_bug.cgi?id=1883457) - Part 1: Disable jit compilation within the parent process on iOS, * layout.css.at-scope.enabled Bug [1882581](https://bugzilla.mozilla.org/show_bug.cgi?id=1882581): Implement `@scope` parsing. * layout.css.basic-shape-shape.enabled Bug [1823463](https://bugzilla.mozilla.org/show_bug.cgi?id=1823463) - Support shape() for clip-path property in style. * layout.css.letter-spacing.model Bug [1890773](https://bugzilla.mozilla.org/show_bug.cgi?id=1890773) - Create a pref to control how letter-spacing is inserted around characters. * layout.css.motion-path-basic-shapes.enabled Bug [1887738](https://bugzilla.mozilla.org/show_bug.cgi?id=1887738) - Remove preferences of motion path (ray(), basic-shapes, coord-box, offset-position). * layout.css.motion-path-coord-box.enabled Bug [1887738](https://bugzilla.mozilla.org/show_bug.cgi?id=1887738) - Remove preferences of motion path (ray(), basic-shapes, coord-box, offset-position). * layout.css.motion-path-offset-position.enabled Bug [1887738](https://bugzilla.mozilla.org/show_bug.cgi?id=1887738) - Remove preferences of motion path (ray(), basic-shapes, coord-box, offset-position). * layout.css.motion-path-ray.enabled Bug [1887738](https://bugzilla.mozilla.org/show_bug.cgi?id=1887738) - Remove preferences of motion path (ray(), basic-shapes, coord-box, offset-position). * layout.css.prefixes.transforms Bug [390936](https://bugzilla.mozilla.org/show_bug.cgi?id=390936) - Enable CSS Zoom by default. * layout.css.prefixes.transitions Bug [390936](https://bugzilla.mozilla.org/show_bug.cgi?id=390936) - Enable CSS Zoom by default. * layout.css.relative-color-syntax.enabled Bug [1889133](https://bugzilla.mozilla.org/show_bug.cgi?id=1889133) - Parse the `from <color>` part of the relative color syntax. * layout.css.starting-style-at-rules.enabled Bug [1889496](https://bugzilla.mozilla.org/show_bug.cgi?id=1889496) - Part 1: Parse @starting-style rule. * layout.css.video-dynamic-range.allows-high Bug [1764201](https://bugzilla.mozilla.org/show_bug.cgi?id=1764201) Part 2: Make Gecko_MediaFeatures_VideoDynamicRange check per-screen HDR. * layout.css.zoom.enabled Bug [390936](https://bugzilla.mozilla.org/show_bug.cgi?id=390936) - Enable CSS Zoom by default. * mathml.centered_operators.disabled Bug [1890531](https://bugzilla.mozilla.org/show_bug.cgi?id=1890531) - Remove automatic adjustment for "centered operators". * mathml.top_bottom_spacing_for_stretchy_operators.disabled Bug [1890523](https://bugzilla.mozilla.org/show_bug.cgi?id=1890523) - Remove extra space above/below stretchy operators. * media.cubeb.input_drift_factor Bug [1887774](https://bugzilla.mozilla.org/show_bug.cgi?id=1887774) add prefs to simulate drift in audio streams * media.cubeb.output_drift_factor Bug [1887774](https://bugzilla.mozilla.org/show_bug.cgi?id=1887774) add prefs to simulate drift in audio streams * media.gmp-manager.allowLocalSources Bug [1886855](https://bugzilla.mozilla.org/show_bug.cgi?id=1886855) - Add pref to allow disabling fallback for GMP updates. * media.theora.enabled Bug [1860492](https://bugzilla.mozilla.org/show_bug.cgi?id=1860492) - Add a pref to disable Theora playback, disable it on Nightly. * media.widevine.hdcp-protection-mask Bug [1884962](https://bugzilla.mozilla.org/show_bug.cgi?id=1884962) - report kProtectionHDCP for the protection mask. * network.decompression_off_mainthread Bug [1886734](https://bugzilla.mozilla.org/show_bug.cgi?id=1886734): Use Content-Length to decide if decompression should be off-MainThread Bug [1356686](https://bugzilla.mozilla.org/show_bug.cgi?id=1356686): Put OMT decompression behind a pref * network.decompression_off_mainthread_min_size Bug [1886734](https://bugzilla.mozilla.org/show_bug.cgi?id=1886734): Use Content-Length to decide if decompression should be off-MainThread * network.dns.preferIPv6 Bug [1810362](https://bugzilla.mozilla.org/show_bug.cgi?id=1810362) - Sort the addresses in a DNS lookup result so the IPv6 ones come first. * network.fetch.systemDefaultsToOmittingCredentials Bug [1881800](https://bugzilla.mozilla.org/show_bug.cgi?id=1881800) - chrome/system-privileged fetch should not use credentials, * network.http.accept-encoding.secure Bug [1871963](https://bugzilla.mozilla.org/show_bug.cgi?id=1871963): Implement zstd content-encoding support * network.http.digest_auth_cnonce_length Bug [1892449](https://bugzilla.mozilla.org/show_bug.cgi?id=1892449) - Set network.http.digest_auth_cnonce_length to 16, a=dmeehan Bug [1870579](https://bugzilla.mozilla.org/show_bug.cgi?id=1870579) - Use PK11_GenerateRandom to generate random number, * network.http.http2.aggressive_coalescing Bug [1420777](https://bugzilla.mozilla.org/show_bug.cgi?id=1420777) - Coalesce connections less aggresively * network.http.priority_header.enabled Bug [1865394](https://bugzilla.mozilla.org/show_bug.cgi?id=1865394) - added urgency and incremental to request header in netmonitor. * network.http.speculative-parallel-limit Bug [1816539](https://bugzilla.mozilla.org/show_bug.cgi?id=1816539) - Consider increasing the number of sockets available for speculative connect (currently 6) * network.url.simple_uri_schemes Bug [1878001](https://bugzilla.mozilla.org/show_bug.cgi?id=1878001) - Add bypass list for DefaultURI fallback * network.url.some_schemes_bypass_defaultURI_fallback Bug [1878001](https://bugzilla.mozilla.org/show_bug.cgi?id=1878001) - Add bypass list for DefaultURI fallback * pdfjs.enableHighlightEditor Bug [1867513](https://bugzilla.mozilla.org/show_bug.cgi?id=1867513) - Enable highlighting in a PDF in beta 126 a=dmeehan Bug [1867512](https://bugzilla.mozilla.org/show_bug.cgi?id=1867512) - Enable highlighting text in a pdf in nightly and early beta * print.center_page_on_sheet Bug [1882890](https://bugzilla.mozilla.org/show_bug.cgi?id=1882890) Part 1 - When page scaling in nsPageFrame is small, center the content instead of putting in the upper left. * prompts.contentPromptSubDialog Bug [1705440](https://bugzilla.mozilla.org/show_bug.cgi?id=1705440) - remove old modal prompt implementation, * prompts.modalType.httpAuth Bug [1887712](https://bugzilla.mozilla.org/show_bug.cgi?id=1887712) - remove the unused prompts.modalType.httpAuth pref, * prompts.tabChromePromptSubDialog Bug [1705440](https://bugzilla.mozilla.org/show_bug.cgi?id=1705440) - remove old modal prompt implementation, * prompts.windowPromptSubDialog Bug [1887717](https://bugzilla.mozilla.org/show_bug.cgi?id=1887717) - remove prompts.windowPromptSubDialog pref, * reader.color_scheme.values Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.colors_menu.enabled Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.custom_colors.background Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.custom_colors.foreground Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.custom_colors.selection-highlight Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.custom_colors.unvisited-links Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * reader.custom_colors.visited-links Bug [1876432](https://bugzilla.mozilla.org/show_bug.cgi?id=1876432) - Added support for custom themes as its own menu in Reader View. * sidebar.companion Bug [1883941](https://bugzilla.mozilla.org/show_bug.cgi?id=1883941) - Add sidebar launcher to sidebar Bug [1884671](https://bugzilla.mozilla.org/show_bug.cgi?id=1884671) - Add directory and pref for the new sidebar foundational work * sidebar.revamp Bug [1883941](https://bugzilla.mozilla.org/show_bug.cgi?id=1883941) - Add sidebar launcher to sidebar * toolkit.contentRelevancy.enabled Bug [1886207](https://bugzilla.mozilla.org/show_bug.cgi?id=1886207) - Add a new component for content relevance ranking * toolkit.telemetry.user_characteristics_ping.logLevel Bug [1882422](https://bugzilla.mozilla.org/show_bug.cgi?id=1882422): JSActor and Component Structure to get some data back from JS-land in C++-land * ui.-moz-autofill-background Bug [1893949](https://bugzilla.mozilla.org/show_bug.cgi?id=1893949) - Don't use a semi-transparent autofill background.

Thorin-Oakenpants commented 1 month ago

for the record ... I drink and I know things

click me for proof

![drinkies](https://github.com/arkenfox/user.js/assets/16656956/fde63b43-e40d-459a-91dd-3171c2bcf883)

Thorin-Oakenpants commented 3 weeks ago

@jonaharagon - just going to mention this here, rather than create a new issue or whatever

https://discuss.techlore.tech/t/i-want-to-like-mullvad-browser-but/8826/3

So for the last 8 months we (MB/rui/me) have been talking about how (to kill arkenfox and) improve MB (and TB). It's important that MB/TB share the same code, otherwise if it gets too divergent it becomes untenable for all parties (MB being a sponsor and all).

TB has also been re-doing the design spec, and a large chunk of this is dispelling/removing the myth that they can prevent anything ever touching the disk (impossible, since the OS controls a lot of that). This leads into discussion on allowing passwords (talked about for over a year) and other measures to allow some disk if the user opts into it.

And in fact, after a recent chat, I've come to a conclusion that both MB/TB should start in normal mode - and it was spoken about to some degree in Portugal two weeks ago at the annual tor meetup (I was there), but not in a session and I missed it - or richard simply got around to logging some issues. But anyway, there's a lot of work for this to happen (such as anything touching the disk such as cookies need to be encrypted per session with a memory only key, but not site exceptions .. dealing with service workers, etc). A lot of things to work through - e.g. do we need to encrypt anything on disk if the user opted in?

edit: also rui was looking at using profiles, and there is an installable version of MB coming for windows/mac which helps with flicking between profiles - i.e one profile is start in normal mode, the other is PB mode - but I argued against this - it's just an option

But FYI:

ruihildt commented 3 weeks ago

It has been very clear for some time that if you can't use a browser by default, based on your requirements (and they vary wildly based on your usage, threat model, personal habits, etc.), the added friction will push you to use your other browser more and more.

This is why for example with Mullvad VPN, we start from the point of view that your VPN should always be on. And then you can have an escape hatch, using the split tunneling, because unfortunately there are situations where using a VPN will stop you from doing what you need to do online.

We are approaching the browser space with Mullvad Browser in a similar way.

On one hand we want to improve how well internet works while keeping the privacy focus and model which makes Mullvad and Tor Browsers differents. On the other hand, we want to make it possible to use Mullvad Browser as your default browser, and we're painfully aware that staying logged on some websites is a blocker for a lot of people (me included).

How it will look like and how it will work is not fixed (and improvements will most probably happens incrementally), because we need to make sure it's technically sound, user friendly and future proof.

Thorin-Oakenpants commented 3 weeks ago

thanks rui

meanwhile, you can all use ... and MB allhail-AF

sertonix commented 3 weeks ago

to kill arkenfox

Is that something that could happen soon (next year or so)? Cause MB is not yet packaged on alpine linux and it would probably take some time to get working.

Thorin-Oakenpants commented 3 weeks ago

Is that something that could happen soon (next year or so)

my best guess is that nothing will happen with AF until at least the next ESR, i.e after 128, so FF141 or something - and given how super stable it is, that's where I would stop (if MB was were where we want it), so in theory you should be good for years. Honestly nothing really changes for us, I'm down to doing updates every 3 or 4 releases - this last update of 4 months' worth had only 1 new active pref.

So worst case scenario you could used ESR141 and be fine for another 2 years from now, or longer if you use stable release channel and as per usual, nothing ever changes that matters - and I could always do an occasional update, maybe - you have lots of options