bugmen0t

Maybe you want to opt out of Google activity tracking? When I go to that page it says "No Activity".

You likely want a separate domain indeed. See https://security.googleblog.com/2012/08/content-hosting-for-...

That's not entirely true. Remembering history is also different from remembering permissions. Firefox should persist those independently from actual URLs in browsing history.

And there's a button in settings where you can disable permission prompts for notifications globally.

If you need less abstractions over protocols, you might look into [mio](https://github.com/carllerche/mio).

What I like about this list, is that it's opinionated and thus terse.

Take note that some of these tips are either not considered good practice or even harmful depending on your locale.

E.g., the data protection standards in the EU are so high, that there's no need to worry about DNS or ISP snooping for advertisements/tracking. This makes using a VPN or using a different DNS less useful. I might even go so far and call it harmful, because you're introducing a party that you don't have such a strong contract with.

He still works on browsers, but blogs less. You can see his contributions on GitHub.

Of all people, the folks here on hacker news, are in the best situation to change that.

Be vocal! Use your influence!

And if you have the means: donate!

What's also amazing, is that if you sign up for a Firefox Account you get privacy preserving sync: The data is encrypted & decrypted on your devices. Mozilla doesn't get to see your data.

6) Even better: Built-in Tracking Protection can likely serve the same use case and gives you better performance, because jumping into JavaScript code and back for every request is costly (it's not a high cost, depending on hardware though).

There are some regions in the world, where you're better off with a DoH server that Mozilla has leverage with (because of a business contract).

Most notable, this doesn't hold true for Europe, where you do have a good contract with your ISP and GDPR protects you from lots of shenanigans that are possible in the US.

If you're the admin, you can disable DoH through a group policy, no?

But this isn't about:config. This is in settings.

Nope. Mozilla blog says:

> "Moving forward, we are working to build a larger ecosystem of trusted DoH providers, and we hope to be able to experiment with other providers soon."

More in <https://blog.mozilla.org/futurereleases/2018/11/27/next-step...

Rust+WebAssembly is excellent.

In Web Security: - The Tangled Web (http://lcamtuf.coredump.cx/tangled/)

You can look at the Web Application Hacker's Handbook or the Browser Hacker's Handbook, if you want. But TTW tops them all.

Not super reliably. But try this one: https://github.com/mozfreddyb/test-firstpartyisolation

This paper has all the gory details: https://www.researchgate.net/publication/315848178_Extending...

every SSO is different. But mine all worked.

TLDR: in my experience: very little.

They seem to be doing well, generally: <https://duckduckgo.com/traffic>

Firefox has a list of all "about:" pages at about:about

Reminds me of Firefox Container Tabs and other advanced ffeatures

Mozilla did a study with user testing. Breaks lots of federated logins / Single-sign on solutions. Too much breakage to enable it by default. If you confuse users with this, they switch to GChrome and all you did for them is a privacy disservice.

There's a First Party Isolation add-on though if you want a reachable toggle button.

They don't. It's done locally in the browser.

Nothing to do with privacy laws. User base and for Pocket is likely larger in US which makes suggestion more accurate.

Unlikely. FWIW, Firefox 60 is an ESR release :-)

Did you try container tabs instead of profiles? Could save you a few coh cycles.

The gmail/gdocs slowdowns are being tracked and worked on. It's a problem when websites actively optimize for competitive products though.

Coming soon though!

Mozilla does not work for shareholders.. All that money goes back into Mozilla itself.