Redoubt Android 153.0esr-1 — Beta 2 (superseded by Beta 3)

Warning

Superseded by Beta 3. Please install Beta 3 instead; it updates Beta 2 in place and keeps your settings.

Beta 2 has two known problems that Beta 3 fixes. It also lacks the Firefox ESR 153.4 security updates.

• "uBlock Origin setup failed" appears on fresh installs.
• The same dialog appears 30 seconds after opening the app from the home screen.

If you selected Mullvad for DNS over HTTPS, Beta 3 moves you to the default provider, because Mullvad is discontinuing that service.

Second beta of Redoubt for Android, built from Firefox ESR 153 with LibreWolf's
patch set. Replaces Beta 1, which should not be used — see below.

What changed since Beta 1

uBlock Origin now ships. It installs itself on first run from a hash-pinned,
Mozilla-signed XPI packaged in the APK (1.74.0), with no fetch from an add-on
collection. It is an ordinary extension: you can disable or remove it.

Firefox branding is gone. Beta 1 shipped Mozilla's trademarks — the Firefox
flame as the home-screen wordmark with the word "Firefox" beside it, five in-app
logos, and eight user-selectable Firefox app icons including the 2004 logo.
Those are replaced throughout. The engine layer is done too: it previously
identified itself as "Fennec" / "Mozilla Fennec" / "Mozilla" inside omni.ja.

Both gaps existed because nothing inspected images or the engine's own branding.
Both now have a gate that runs in CI.

Verify what you downloaded

sha256sum -c SHA256SUMS.signed
apksigner verify --print-certs fenix-<abi>-release.apk | grep -i SHA-256

The certificate digest must be:

64:14:EB:33:46:81:CF:6E:92:90:34:B5:6A:06:2D:2B:8D:A0:90:82:21:72:F7:A3:95:2C:85:FD:D1:28:3B:D0

Signed with APK signature schemes v2 and v3, no v1.

Which file

fenix-arm64-v8a-release.apk for almost any phone from the last several years.
armeabi-v7a for older 32-bit devices, x86_64 for emulators. The universal
APK carries all three and is much larger; prefer a per-ABI build.

Known limitations

• The Gecko content-process sandbox is absent on Android. This is the
  honest headline: Redoubt ships the same privacy configuration and the same
  Gecko-level security patches as LibreWolf desktop, on a platform whose process
  containment is weaker — and we publish exactly where, in docs/android/PARITY.md.
• DNS-over-HTTPS configuration does not apply. Fenix overwrites it on every
  cold start; use the DoH screen in Settings.
• First run makes six Remote Settings requests — certificate revocation, the
  add-on and graphics blocklists, tracking-protection lists. That is a deliberate
  decision, recorded in settings/android.cfg; nothing telemetry-, ads- or
  crash-reporting-shaped is contacted, measured through a resolver that does not
  filter.
• One key holder. Losing that key ends the app under this applicationId.

Provenance

Built from 764fc91c7cbf100705bb456f6a69500ba10f30b9 against Firefox ESR 153.0, three ABIs from one fat AAR,
R8 on. Signed offline by the maintainer; CI never sees the key.