4 ms·
I'm not familiar with Firefox Multi-account containers; do they use separate Unix accounts? (since my approach means Firefox is running as a completely diffrent
by hazeii 9y ago
I'm not familiar with Firefox Multi-account containers; do they use separate Unix accounts? (since my approach means Firefox is running as a completely diffrent user, a simple firefox compromise or bug shouldn't be able to access anything sensitive on the main account - like SSH keys, say).
- regecks 9y agoThey're not containers as in Linux containers, they're "contextual identities" within the same Firefox process, that isolate things like cookies. Much weaker isolation (technologically) than process/user privilege separation, but OTOH highly usable. (Well, there's the e10s process separation, but nothing anything extra for multi-account containers, as far as I understand). What things it isolates are listed here: https://wiki.mozilla.org/Security/Contextual_Identity_Project/Containers#Implementation_Details https://wiki.mozilla.org/Security/Contextual_Identity_Projec... FWIW they work great.
- QasimK 9y agoI don't think they offer much in the way of security, but they do let you isolate the websites you choose from each other. I wrote a very small blog post about them: http://iamqasimk.com/2017/11/21/firefox-containers/ http://iamqasimk.com/2017/11/21/firefox-containers/