Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

remove privacy.firstparty.isolate #69

Closed
johannesrld opened this issue Sep 14, 2021 · 15 comments · Fixed by #309
Closed

remove privacy.firstparty.isolate #69

johannesrld opened this issue Sep 14, 2021 · 15 comments · Fixed by #309
Assignees
Labels
c:browsers browsers, add-ons, and related topics status:approved issues that are immediately approved, submit a PR! t:correction content corrections or errors

Comments

@johannesrld
Copy link

Description

privacy.firstparty.isolate has been made (effectively) redundant with recent firefox updates, and should be removed
URL of affected page:
https://www.privacyguides.org/browsers/

@rusty-snake
Copy link
Contributor

privacytools/privacytools.io#2081 (comment) and the following

@jonaharagon jonaharagon added c:browsers browsers, add-ons, and related topics t:correction content corrections or errors labels Sep 15, 2021
@dngray
Copy link
Member

dngray commented Sep 15, 2021

privacytools/privacytools.io#2081 (comment) and the following

What I am looking at doing with that is removing the whole "about:config" section, and just showing what can be achieved through Mozilla's UI.

We'll of course still mention https://github.com/arkenfox/user.js

@ghost
Copy link

ghost commented Sep 19, 2021

Any thoughts on how you would expect this to happen?

What does the Strict mode in Firefox leave to be desired? Curious here.

@PhysicsIsAwesome
Copy link

PhysicsIsAwesome commented Nov 4, 2021

What does the Strict mode in Firefox leave to be desired? Curious here.

A lot of things. privacy.resistFingerprinting is not enabled, just to give an example.

@PhysicsIsAwesome
Copy link

privacy.firstparty.isolate has been made (effectively) redundant with recent firefox updates, and should be removed

I don't see it being redundant. Do you have a source or sth? Tor browser and arkenfox still use FPI.

@rusty-snake
Copy link
Contributor

rusty-snake commented Nov 4, 2021

If you set ETP=strict, FPI is effectively redundant (for the average user).

Since FF85 is privacy.partition.network_state set to true and isolates/partitions all network stuff (various caches, hsts, ...) and ETP in strict mode isolates storage stuff (cookies, localStorage, indexedDB, ...).

@jonaharagon jonaharagon added the status:approved issues that are immediately approved, submit a PR! label Nov 24, 2021
@Thorin-Oakenpants
Copy link

FPI overrides ETP Strict - so you should mention to make sure that is set to false - since you listed it for so long to so many users

@dngray dngray mentioned this issue Nov 24, 2021
@dngray
Copy link
Member

dngray commented Nov 24, 2021

FPI overrides ETP Strict - so you should mention to make sure that is set to false - since you listed it for so long to so many users

Would it not be worthwhile to just suggest users create a new profile?

If I'm being totally honest, we don't know what state a user's browser might be in if they've been fiddling with about:config settings. I'm not totally confident that flicking that single option will restore things.

Perhaps something general like.

If you've changed settings in about:config, in the past, we suggest you create a new browser profile.

@Thorin-Oakenpants
Copy link

that's up to you .. at arkenfox we can run prefsCleaner or override for a few releases

@dngray
Copy link
Member

dngray commented Nov 25, 2021

I'm thinking of re-writing the blog article https://privacyguides.org/blog/2019/11/09/firefox-privacy/ so we might mention it there.

@ItsIgnacioPortal
Copy link

removing the whole "about:config" section

How about the contents just be moved into a blog, and then linked on the "Related Information" section? Mozilla frequently removes config options from the GUI and lets them be accesible via about:config only, so removing that section would limit the users a lot.

@Thorin-Oakenpants
Copy link

How about the contents just be moved into a blog

that's what arkenfox is for. For most users, turning on HTTPS-Only Mode, ETP Strict and adding uBO is more than enough

@ghost
Copy link

ghost commented Nov 26, 2021

@Thorin-Oakenpants, You are right. But I think it could much better like in GUI as https://ffprofile.com which will be easy to be use or how about making a UI like https://privacy.sexy ?

I mean these could be better for the user by finely adjust thing to fix some issues with arkenfox like crashes or incompatiblity with sites.

@ItsIgnacioPortal
Copy link

@Thorin-Oakenpants, You are right. But I think it could much better like in GUI as https://ffprofile.com which will be easy to be use or how about making a UI like https://privacy.sexy ?

I mean these could be better for the user by finely adjust thing to fix some issues with arkenfox like crashes or incompatiblity with sites.

A bit unrelated but thanks for the links! They seem really handy for mass-deployments

@dngray
Copy link
Member

dngray commented Nov 28, 2021

This will get closed soon when #383 and #309 is finished. Should happen this week.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
c:browsers browsers, add-ons, and related topics status:approved issues that are immediately approved, submit a PR! t:correction content corrections or errors
Projects
None yet
Development

Successfully merging a pull request may close this issue.

7 participants