search

arkenfox / user.js

Firefox privacy, security and anti-tracking: a comprehensive user.js template for configuration and hardening
MIT License
10.24k stars 519 forks source link

How to proceed: Delete storage folder or not? #455

Closed Ratator closed 6 years ago

Ratator commented 6 years ago

Hello everybody

It's about IndexedDB and other local databases on Firefox profiles:

The IndexedDB needs, no question. That's why private browsing is out of the question. Many websites do not work otherwise. But - is that a possible solution:

Can I delete the contents of this folder after each Firefox session or not? C:\Users\AppData\Roaming\Mozilla\Firefox\Profiles\storage

I did some research on the web. I have the impression that there is no consensus in the communities.

A small statement in the wiki on this topic would really be important.

Many Thanks.

earthlng commented 6 years ago

Hi, well it's certainly possible but probably not the best idea - it depends on your setup. Addons and certain Firefox features also use IndexedDB for storing some stuff. Clearing Offline Website Data on shutdown (or manually from time to time if you leave FF open for long periods of time) should delete all the IDB set by websites while keeping all the IDB stuff from Addons and FF internals intact. I'm sure there are Addons that let you clear IDB periodically or by the press of a button if you set it up that way but I'm not using one of these and wouldn't know which ones to recommend you. Or you can use something like Temporary Containers and set it up to delete the containers as soon as you close the last tab of a certain domain (or delete it after x minutes in case you re-open it again and want to remain logged in or whatnot) Or you can use private browsing for sites where you allow JS and which work without needing IDB.

Generally and unless you're super paranoid, deleting it on shutdown is probably the easiest and best solution for most people.

Ratator commented 6 years ago

Thank you very much @earthlng and

A small statement in the wiki on this topic would really be important.

I'm very sorry, I overlooked the 4.1.1 section: https://github.com/ghacksuserjs/ghacks-user.js/wiki/4.1.1-Setting-Extension-Permission-Exceptions

At Point Strategy as described: Allow first party cookies and use an extension to clean up and/or block cookies and storage.

Do I really need an extension to delete my cookies? With Firefox, you can delete all cookies and even OWD (Offline Website Data) including IndexedDB at Exit.

CAD (Cookie AutoDelete) can not delete IndexedDB.

Ratator commented 6 years ago

Note that uMatrix allow cookies in but blocks them going out - this is not the same thing.

What do you think about allowing uMatrix to do everything and just use uMatrix for the cookie curfew?

When googling on the web, etc. uMatrix is a burden. Constantly you do not know if the website is working properly or not. And constantly you have to whitelisten. Do you have a recommended procedure or a tip here?

2glops commented 6 years ago

The "howtos" could help : https://github.com/gorhill/uMatrix/wiki

crssi commented 6 years ago

@Ratator I am using uM like you suggested with addition to block lists with the domains that are big no no. For others I am using uBO. You should be aware that the best solution is the @Thorin-Oakenpants approach. But it is for "geeks"... for example my folks would be lost in that case. Well see what will bring storage v2, I guess.

crssi commented 6 years ago

TC has also some problems: https://github.com/stoically/temporary-containers/issues/127