4 ms·

For a truly minimalistic browser with support for modern HTML and a serious orientation towards security, see xombrero at https://opensource.conformal.com/wiki/

by gkya 11y ago

For a truly minimalistic browser with support for modern HTML and a serious orientation towards security, see xombrero at https://opensource.conformal.com/wiki/xombrero https://opensource.conformal.com/wiki/xombrero . It provides fine-grained whitelisting for plugins, js and cookies, and options for enabling/disabling many other security/privacy-critical features, like 3rd party cookies, referrers, etc. The same guys also have made AdSuck, which blocks ads at the DNS level. These tools do not have the eye-candy that Min has though. Kudos for the design, it's indeed lovely.

ryan-c 11y ago
Xombrero seems to be unmaintained and has severe security problems. It's HTTPS implementation is vulnerable to MitM script injection. See my post here: https://rya.nc/https-script.html https://rya.nc/https-script.html
dpfu 11y ago
For a truly truly minimal browser (albeit without support for modern HTML) check out the Dillo browser [1], in active development since 1999 [2]! If all you need is to render HTML, it's tiny and fast. It supports HTTPS and no JavaScript (so you don't need NoScript for that ;) [1] http://www.dillo.org http://www.dillo.org [2] http://hg.dillo.org/dillo/raw-file/default/ChangeLog http://hg.dillo.org/dillo/raw-file/default/ChangeLog
- vmorgulis 11y ago
  IMHO the truly one because of it's render engine (not webkit/gecko/blink-based).
Sir_Cmpwn 11y ago
I found uzbl after I told a friend about xombrero: http://www.uzbl.org/ http://www.uzbl.org/
ymse 11y ago
I really enjoyed "dwb" until the author abandoned it late 2014. Now they seem to have picked up development again(!): http://portix.bitbucket.org/dwb/ http://portix.bitbucket.org/dwb/ It's fully keyboard driven (to the extent possible) and has a decent amount of extensions, including ad blocking and a great requestpolicy manager for controlling 3rd party requests.
symtos 11y ago
xombrero depends on webkit. truly minimal? right. oriented towards security? have you not seen how WebKit does security? they wait for dozens of reported vulns before patching/disclosing. nothing that depends on webkit can ever be considered "oriented towards security"
asb 11y ago
If you like Vim keybindings, check out qutebrowser, which currently has a crowdfunding campaign to update it to make use of the newer QtWebEngine backend https://www.indiegogo.com/projects/qutebrowser-a-keyboard-focused-vim-like-browser https://www.indiegogo.com/projects/qutebrowser-a-keyboard-fo...
- gkya 11y ago
  They want my email and name in order to merely show me the page, even on vanilla Chromium: http://imgur.com/QVH4AeV http://imgur.com/QVH4AeV
  - 0942v8653 11y ago
    It's not their fault, that's indiegogo. Here is the GitHub repo: https://github.com/The-Compiler/qutebrowser https://github.com/The-Compiler/qutebrowser

by gkya 11y ago

ryan-c 11y ago

Xombrero seems to be unmaintained and has severe security problems. It's HTTPS implementation is vulnerable to MitM script injection. See my post here: https://rya.nc/https-script.html https://rya.nc/https-script.html

dpfu 11y ago

For a truly truly minimal browser (albeit without support for modern HTML) check out the Dillo browser [1], in active development since 1999 [2]! If all you need is to render HTML, it's tiny and fast. It supports HTTPS and no JavaScript (so you don't need NoScript for that ;) [1] http://www.dillo.org http://www.dillo.org [2] http://hg.dillo.org/dillo/raw-file/default/ChangeLog http://hg.dillo.org/dillo/raw-file/default/ChangeLog

vmorgulis 11y ago
IMHO the truly one because of it's render engine (not webkit/gecko/blink-based).

Sir_Cmpwn 11y ago

I found uzbl after I told a friend about xombrero: http://www.uzbl.org/ http://www.uzbl.org/

ymse 11y ago

I really enjoyed "dwb" until the author abandoned it late 2014. Now they seem to have picked up development again(!): http://portix.bitbucket.org/dwb/ http://portix.bitbucket.org/dwb/ It's fully keyboard driven (to the extent possible) and has a decent amount of extensions, including ad blocking and a great requestpolicy manager for controlling 3rd party requests.

symtos 11y ago

xombrero depends on webkit. truly minimal? right. oriented towards security? have you not seen how WebKit does security? they wait for dozens of reported vulns before patching/disclosing. nothing that depends on webkit can ever be considered "oriented towards security"

asb 11y ago

If you like Vim keybindings, check out qutebrowser, which currently has a crowdfunding campaign to update it to make use of the newer QtWebEngine backend https://www.indiegogo.com/projects/qutebrowser-a-keyboard-focused-vim-like-browser https://www.indiegogo.com/projects/qutebrowser-a-keyboard-fo...

gkya 11y ago
They want my email and name in order to merely show me the page, even on vanilla Chromium: http://imgur.com/QVH4AeV http://imgur.com/QVH4AeV
- 0942v8653 11y ago
  It's not their fault, that's indiegogo. Here is the GitHub repo: https://github.com/The-Compiler/qutebrowser https://github.com/The-Compiler/qutebrowser