3 ms·
I love firstPartyIsolate and resistFingerprinting. These should probably be on by default.
by sdfjkl 9y ago
I love firstPartyIsolate and resistFingerprinting. These should probably be on by default.
- mkbkn 9y agoWhat is firstPartyIsolate ? Could you please explain?
- jlgaddis 9y agoI didn't know what it was either, until I RTFA: > "This preference makes the browser associate all data (including cookies, HSTS data, cached images, and more) for any third party domains with the domain in the address bar." They even included a link you can click on to get more info on it.
- deleted 9y ago[deleted]
- sdfjkl 9y agoUhm, it's explained in the article.
- zaarn 9y agofPI will isolate every first-party domain as much as the browser can, including HSTS and other security related properties. This means that if you visit example.com and then initech.com and both load a tracker from evilshit.org, then the tracker will see too completely fresh browser installs, not even HSTS will be setup if it was used. Basically, every domain you type into the URL address bar behaves as if it was a unique container.
- kbrosnan 9y agoWhile it is clear why hn folks would love those prefs. They break websites far too often to be defaults.
- sdfjkl 9y agoPerhaps a sign of broken websites.
- robin_reala 9y agoI’ve been running resistFingerprinting by default but it’s definitely a raw experience. Every WordPress site on the net triggers a false positive (understandably, but still), WebGL is currently broken with it on, and even the Firefox download page will serve a Windows .exe to a Mac browser if you’re using it.