Firefox is open-source and has less than 6% market share - #242 by AbstractConcept
Firefox is open-source and has less than 6% market share - #240 by qtwork
Firefox is open-source and has less than 6% market share - #243 by PhaseLockedLoop
Requests and discussions made by @AbstractConcept @ThatGuyB @qtwork @The_DM_Barlow
At request let them have cake LibreWolf
So you want privacy but you hate what Firefox has become out of the box but your also not quite wanting everything broke. You have an option. Its called LibreWolf
You can find their documentation here.
https://librewolf-community.gitlab.io/docs/
https://librewolf-community.gitlab.io/
Download it via their page or if you are running the most based distro … our lord and savior arch linux you can grab it from the AUR
oh by the way I run arch
My experience thus far
Its been a bit bumpy. LOTS of stuff is disabled. Its not got the most secure default certificate policy etc so I have made the following changes to my about:config. Ill get into extensions in a moment but these are my modifications. IMHO there is no good browser. They are all various levels of however it doesnt mean we cant have a preference Browsers will always suck because the web sucks: Why The Web Sucks (You Just Don't Know It)
Disclaimer: I know some of these compromise privacy. Im well aware of needing to configure IPv6 properly. You can take issue with it and not use the moidifcation but I am NOT willing to entertain the discussion as I rely on it. Feel free to contest or discuss it below amongst yourself as well as my other modifications
About Config Modifications
// TURN OCSP BACK ON
user_pref("security.OCSP.require", true);
user_pref("security.xfocsp.errorReporting.automatic", true);
// HARDEN SSL to LIBRESSL defaults
user_pref("security.ssl3.ecdhe_ecdsa_aes_128_sha", false);
user_pref("security.ssl3.ecdhe_ecdsa_aes_256_sha", false);
user_pref("security.ssl3.ecdhe_rsa_aes_128_gcm_sha256", false);
user_pref("security.ssl3.ecdhe_rsa_aes_128_sha", false);
user_pref("security.ssl3.ecdhe_rsa_aes_256_sha", false);
user_pref("security.ssl3.rsa_aes_128_gcm_sha256", false);
user_pref("security.ssl3.rsa_aes_128_sha", false);
user_pref("security.ssl3.rsa_aes_256_gcm_sha384", false);
user_pref("security.ssl3.rsa_aes_256_sha", false);
user_pref("security.ssl3.rsa_des_ede3_sha", "false");
// More tracking protection enabled
user_pref("privacy.trackingprotection.cryptomining.enabled", true);
user_pref("privacy.trackingprotection.enabled", true);
user_pref("privacy.trackingprotection.fingerprinting.enabled", true);
// Modified Privacy Shutdown settings
user_pref("privacy.clearOnShutdown.cookies", true);
user_pref("privacy.clearOnShutdown.offlineApps", true);
user_pref("privacy.clearOnShutdown.siteSettings", true);
user_pref("privacy.donottrackheader.enabled", true);
user_pref("privacy.history.custom", true);
user_pref("privacy.purge_trackers.date_in_cookie_database", "0");
user_pref("privacy.resistfingerprinting", "true");
// I require IPv6
ser_pref("network.dns.disableIPv6", false);
user_pref("network.http.fast-fallback-to-IPv4", false);
// Adding my DNS over HTTPS server
user_pref("network.proxy.socks_remote_dns", false);
user_pref("network.proxy.type", 0);
user_pref("network.trr.blocklist_cleanup_done", true);
user_pref("network.trr.custom_uri", "https://dns.< MY-TLD >.net/dns-query");
user_pref("network.trr.mode", 2);
user_pref("network.trr.uri", "https://dns.< MY-TLD >.net/dns-query");
// Vacuuming Databases
user_pref("storage.vacuum.last.index", 0);
user_pref("storage.vacuum.last.places.sqlite", 1633932227);
Extensions I current run
I have taken the following provisions that uMatrix is my replacement for NoScript as it allows me finer granular control. In addition to uBlock I am running a DoT + DoH + DoQ (soon) recursive DNS resolver locally with a pihole front end.
Temporary containers is nice but I have it on automatic mode. I also only use it when I really dont want a link to track me. It does not launch a new container each time. I find that to break too much.
User Agent Switcher rotates my user agent
Smart Referer is kind of nice. tyring it out. I ABSOLUTELY LOVE clear URLs.
Canvas Blocker and LocalCDN are thing that I have always ran
Cookies Autodelete is nice once configured properly. I really like Terms Of Service did not read. It allows you to look at the agreements and legal that might concern you
Lets here your experiences.
Also give back to the project if you can
Feel free to make this a continuous megathread of experiences
Mandatory Question: What browsers are you running. Whats your alternative to firefox