[WIP] Browser overhaul. Browser section. #1256
No reviewers
Labels
No Label
🔍🤖 Search Engines
approved
dependencies
duplicate
feedback wanted
high priority
I2P
iOS
low priority
OS
Self-contained networks
Social media
stale
streaming
todo
Tor
WIP
wontfix
XMPP
[m]
₿ cryptocurrency
ℹ️ help wanted
↔️ file sharing
⚙️ web extensions
✨ enhancement
❌ software removal
💬 discussion
🤖 Android
🐛 bug
💢 conflicting
📝 correction
🆘 critical
📧 email
🔒 file encryption
📁 file storage
🦊 Firefox
💻 hardware
🌐 hosting
🏠 housekeeping
🔐 password managers
🧰 productivity tools
🔎 research required
🌐 Social News Aggregators
🆕 software suggestion
👥 team chat
🔒 VPN
🌐 website issue
🚫 Windows
👁️ browsers
🖊️ digital notebooks
🗄️ DNS
🗨️ instant messaging (im)
🇦🇶 translations
No Milestone
No Assignees
1 Participants
Due Date
No due date set.
Dependencies
No dependencies set.
Reference: privacyguides/privacytools.io#1256
Loading…
Reference in New Issue
No description provided.
Delete Branch "blacklight447-ptio-patch-1"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Description
This is the initial PR for browser overhaul. it is still heavy work in progress.
Resolves: #1223
Check List
I have read and understand the contributing guidelines.
I have listed the source code.
This project is free/libre software.
This project has an associated discussion.
https://deploy-preview-1256--privacytools-io.netlify.com/browsers
Deploy preview for privacytools-io ready!
Built with commit
1c765688dc
https://deploy-preview-1256--privacytools-io.netlify.com
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
Change to
image="/assets/img/tools/Firefox.png"
That forum link should be in
github:
It's not open source.
https://github.com/snowhaze/SnowHaze-iOS/blob/master/LICENSE
It only supports iOS (I think so).
It only supports iOS (I think so).
Tor Browser does not support iOS.
Bromite only supports Android.
Remove
.
and makeb
uppercase.Make
b
uppercaseWrong GitHub repository.
"personal fork for testing and submitting diffs for review. you DEFINITELY want the OnionBrowser/OnionBrowser repo instead "
This is proper one: https://github.com/OnionBrowser/OnionBrowser
Onion browser
-Onion Browser
Ios
-iOS
Tor project
-Tor Project
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
i guess we hit our difference here again about what open source means, i think something is open source once the source is available. ill remove it nonetheless.
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
Make
Ios
-iOS
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
whoops, quite a slip up there, fixed it.
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
Im kind of unsure what you mean here.
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
fixed
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
oh wait I misread your sentence, its now fixed.
@ -29,7 +29,104 @@ git="https://trac.torproject.org/projects/tor"
windows="https://www.torproject.org/download/"
GitHub repository link is in
forum:
instead ofgithub:
Change "Mozilla Firefox" to "Firefox Browser", that's how they name it now.
7022e125b9/_includes/sections/browser-recommendation.html (L36)
7022e125b9/_includes/sections/browser-recommendation.html (L83)
Are you sure that's not only the case with the aurora version?
Yes. I'm sure.
Change
github=""
togit: https://gitweb.torproject.org/tor-browser.git/
With this too, but replace
git=""
:38ae83fec2/_includes/sections/browser-recommendation.html (L25)
Replace
github=""
tosource="https://hg.mozilla.org/mozilla-central/"
.They use self-hosted Mercurial instead of git on GitHub.
38ae83fec2/_includes/sections/browser-recommendation.html (L88)
38ae83fec2/_includes/sections/browser-recommendation.html (L10)
fixed
fixed
Nice to see this PR 😄
I think we'll want all these links to be filled out in all these browser cards, yeah? Just like the password manager section.
I think it'd be helpful to expand a bit more on what these patches are and why they matter. In other words what makes Bromite stand out among other available browsers?
We should expand on/tooltip to/hyperlink to the caveats of using Onion Browser. Definitely some gotchas to be aware of.
I'm not so sure about SnowHaze due to a couple of things:
Also on first install you're prompted to subscribe to their VPN.
I think DuckDuckGo on the otherhand is a bit easier to put my confidence in.
Firefox Focus also has the same "button to clear all tabs and data" but according to its readme:
So I think DDG is my preferred "3rd" choice here.
I'm thinking for consistency, will we want to mention here that about:config and extensions aren't available? Also, Firefox comes with its own ad and tracker blocker.
Also if we had a worth mentioning section we could include SnowHaze.
@ -36,0 +98,4 @@
forum="https://forum.privacytools.io/t/discussion-firefox/279"
source="https://github.com/mozilla-mobile/firefox-ios"
ios="https://apps.apple.com/us/app/firefox-private-safe-browser/id989804926"
%}
So we're aren't doing a worth mentioning type section for these sections? I'm thinking about Privacy Browser. Does it belong in a card or to be not listed? In my perspective it definitely stands out among other available browsers on Android.
@ -36,0 +129,4 @@
<a href="https://snowhaze.com/en/index.html">SnowHaze</a>
- An open source web browser with built-in ad, tracker, cookie, and fingerprint blocking, all customizable on a per-site basis.
</li>
</ul>
I think for consistency do we want Onion Browser below Firefox here?
I think the source is here: https://github.com/mozilla-mobile/firefox-ios
TODO for whatever browser is decided as the third card.
Well I actually tried to keep it short so it wasn't overwhelming for normal people, maybe we could put a hyperlink in there where more is explained?
Not sure if the source is there or here? https://github.com/mozilla-mobile
Probably want to update this link to the mobile specific site: https://www.mozilla.org/en-US/firefox/mobile/
Yep, I was thinking of this myself, but me being a html newbie, I will need some help with this. In any case I already left out the "for anonymity" which is present at the tor browser listings, as it contains known issues.
Same as above, I think we'll want the mobile specific site? https://www.mozilla.org/en-US/firefox/mobile/
@ -36,0 +67,4 @@
description='Bromite is a Chromium-based browser with security enhancement patches from GrapheneOS and built-in adblocking and DNS over HTTPS support. More info can be found <a href="https://www.bromite.org/#main-features">here</a>.'
website="https://www.bromite.org/"
forum="https://forum.privacytools.io/t/discussion-bromite-browsers/1521"
github="https://github.com/bromite/bromite"
Could probably use quotes here for consistency.
Could probably use quotes here for consistency.
@ -36,0 +98,4 @@
forum="https://forum.privacytools.io/t/discussion-firefox/279"
source="https://github.com/mozilla-mobile/firefox-ios"
ios="https://apps.apple.com/us/app/firefox-private-safe-browser/id989804926"
%}
oh thats perfectly fine to do as well, this is why i hoped for more feedback on the related issue: #1123 . this PR was just meant to get the work started! all listing can be added upon. all that i listed now was what i would consider solid choices.
That is certainly an option.
Yeah this is what i also wanted to discuss, as i don't have an iOS device in my possession, I wasn't able to test whether you can apply any about:config tweaks, or install extensions, which I why I left that part out for now, any ideas on this?
@dawidpotocki any thoughts?
Most likely, I will update it.
@ -36,0 +129,4 @@
<a href="https://snowhaze.com/en/index.html">SnowHaze</a>
- An open source web browser with built-in ad, tracker, cookie, and fingerprint blocking, all customizable on a per-site basis.
</li>
</ul>
agreed, fixed.
changed.
fixed
@ -36,0 +67,4 @@
description='Bromite is a Chromium-based browser with security enhancement patches from GrapheneOS and built-in adblocking and DNS over HTTPS support. More info can be found <a href="https://www.bromite.org/#main-features">here</a>.'
website="https://www.bromite.org/"
forum="https://forum.privacytools.io/t/discussion-bromite-browsers/1521"
github="https://github.com/bromite/bromite"
fixed.
fixed.
done.
okay so it seems that use " instead of ' here causes netlify to shout at me, i think it has something to do with the fact that we have a hyperlink in there. i rolled it back for now
@ -36,0 +67,4 @@
description='Bromite is a Chromium-based browser with security enhancement patches from GrapheneOS and built-in adblocking and DNS over HTTPS support. More info can be found <a href="https://www.bromite.org/#main-features">here</a>.'
website="https://www.bromite.org/"
forum="https://forum.privacytools.io/t/discussion-bromite-browsers/1521"
github="https://github.com/bromite/bromite"
okay so it seems that use " instead of ' here causes netlify to shout at me, i think it has something to do with the fact that we have a hyperlink in there. i rolled it back for now
Ahh, yeah, because there's already double quotes in the hyperlink. Okay you can ignore this then 😄
i think we should discuss it on the #1223
https://old.reddit.com/r/firefox/comments/6jjmbf/will_firefox_for_ios_ever_support_webextensions/djfj4hr/
Major benefits (imo) for Firefox on iOS are:
I was aware that Firefox had tracking protection but not ad blocking, you got any links on that?
Found this: https://github.com/mozilla-mobile/firefox-ios/issues/5198
It's not as robust at all like using uBO but Firefox's "Tracking Protection" is powered by Disconnect.
As I mentioned in Wire, we could probably link to these in the description I think.
I see in Onion Browser's GitHub Wiki (https://github.com/OnionBrowser/OnionBrowser/wiki) there are 3 linked security advisories:
I think that's the case for iOS, but Android seems to be in that HG repo.
I added all the links. there is one thing I haven't made up my mind about yet: Bromite.
its not the on google play, so we need to link to either their Github release page, or the page where they describe their f-droid repo. While the Github might be easier as people can directly download it, they will not be prompted of new updates, which is a security risk. what do you think? For now, I linked to their f-droid page.
I have now linked to extra information about the patches and what makes bromite stand out.
I have now linked to the advisories in the description.
I have put in a notice about the limitation and built in ad blocker in the description.
I cannot approve as the builds are broken and I didn't yet spot why exactly.
I would need the Netlify preview for more in-depth commenting of the full picture.
What is this backslash?
I am not entirely sure if this trailing space is supposed to be here.
I prefer F-Droid.
As the build is no longer broken, do you have any other feedback?
How do we feel about recommending Safari on macOS and iOS? I would probably recommend it as privacy-respecting out of the box as is.
Sources on this being an official name? I'd prefer to keep it
Mozilla Firefox
, or even better justFirefox
.Should we have these Windows, Mac, Linux, etc links in the mobile section or is that repetitive? And if not I would also remove the ios and android links from the desktop section above as well.
Seems long, we're in the Android section already
Too my knowledge, the official name is Tor Browser for android.
Ive already discussed that topic with @dawidpotocki , would seem like a good idea indeed.
I also thought we could replace the android Icon with a gplay icon, and add F-droid icon to link to the fdroid repos.
Im not sure on this one, @dawidpotocki mentioned its called Firefox browser now, but im personally also fine with either Mozilla Firefox or just Firefox.
Do we want to recommend closed source browsers though?
As there seem quite a few FOSS alternatives ready.
Regardless I'm less concerned about official names and more concerned about "clear" names.
I haven't found any references to "Firefox Browser" besides the Play Store listing on Android, and even then the app itself is simply "Firefox". And their new websites are all simply "Firefox".
Since we're in the browser section I don't think it's necessary to include the "Browser" part even if it is official. Just redundant.
Hmm, odd, the alpha application says: Tor browser for android (alpha). Maybe it was changed?
In any case, you seem to be correct here, ill change it.
Shall we go with just "Firefox" then?
I find it repetitive and inconsistent, "Tor Browser" has different platforms on desktop and mobile.
Please add a warning that users should install "Android Webview" (or similar, preferably with link) from Play/Yalp/Aurora Store and keep it up-to-date since Android ? or otherwise they will be missing a lot of browser security updates. See also the issue where it was recommended.
The name is now changed to just "Firefox".
I added the warning.
Sorry, I am still unhappy with the Privacy Browser section, but here is a suggestion
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
I meant that I want to see something like this so the warning is more explicit. Warning: I haven't tested this and my wording may not be the best possible.
See also https://github.com/privacytoolsIO/privacytools.io/issues/1051#issuecomment-516255301
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
looks good
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
Sorry, I have copy-paste failed.
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
And now the warning cannot be seen. Wiser people, help?
@nitrohorse @JonahAragon @dawidpotocki
I am starting to be happy
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
Not sure if "...so using Privacy Browser on older Androids is insecure." is needed to call out?
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
nah, if we advise people to update for security purposes, then its kinda given that outdated versions are insecure.
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
So we should update the last line then to just “It requires Android 5.0+”?
What if we expanded the description to be a bit more descriptive on its feature set?
Could we update the description to use a
-
such asI would probably update this to expand a bit to:
Could we update the tooltip to something like this? (suggestions in bold)
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
unsure, how many people run android version lower then 5? would seem very minimal, i think we can remove it.
good idea, ill add it.
@ -1,19 +1,19 @@
<h1 id="browser" class="anchor"><a href="#browser"><i class="fas fa-link anchor-icon"></i></a> Browser Recommendations</h1>
<h1 id="browser" class="anchor">
<a href="#browser"><span class="fas fa-link anchor-icon"></span></a>
I think we should also update souce_code.md 👍
What about this:
fixed
done.
Some small description suggestions that could increase readability a bit. Coming along nicely!
@ -17,3 +16,4 @@
linux="https://www.mozilla.org/firefox/linux/"
freebsd="https://www.freshports.org/www/firefox"
openbsd="http://openports.se/www/mozilla-firefox"
netbsd="http://pkgsrc.se/www/firefox"
done.
done.
done
FireFox: For IOS, the Firefox client is missing much of the privacy functionality that can be added on the Desktop.
FireFox focus exists, but isn't very easy to use and removes functionality like multiple tabs.
Brave: Unlike most of the arguments against it for desktop, I make the case that it is the only well-supported web browser for IOS with security and privacy functionality like HTTPS-everywhere.
https://github.com/brave/brave-ios
IceCat: Have we considered listing IceCat for Android web browser?
As I stated above, on mobile you really need a privacy-by-default browser like IceCat.
https://f-droid.org/en/packages/org.gnu.icecat
Both all browsers we list should be private by default, which can be improved upon by extra tweaks. What does brave actually bring in comparison to our iOS listed alternatives?
As I recall, all FireFox has for privacy-protections in its vanilla (non-focus) IOS browser is
clear data
and atracking protection
switch. I do not recall the tracking protection doing much.Brave has a bunch of shields:
Ad Blocker (with tracker blocker)
HTTPS Everywhere
Block Scripts (opt-in?)
Fingerprint Protection (reliability?)
As well as settings:
Browser Lock
Pin
Private Browsing Only
Pop-up Blocker
It also includes the
clear private data
button and a large selection of search engines.Not a huge fan of it not offering custom engines (see https://github.com/brave/brave-ios/issues/1509) but it still has a wide selection.
As I recall, both FireFox and Brave offer a phishing and malware blocker.
In FireFox-IOS I do not believe it to be possible to opt-out.
However, Brave enables users to easily turn this feature off. Not all users may want to share the necessary information with 3rd parties to enabled these blockers.
as brave is a rather controversial browser in our community, i would like you to read the following, as we have decided to no longer list brave:
I would have been fine with the other Reddit post not being posted.
The timeline of events went something like this:
The Brave Team requested Brave Browser be delisted from privacytools.io. Despite this, we believed having a Chromium alternative was important. At the time I even petitioned to keep Brave listed. So we closed their request.
Firefox made significant improvements to their browser in terms of security and privacy in an out-of-the-box configuration.When going through old issues, we noticed that the reasons we originally gave to keep Brave listed were largely no longer applicable: Firefox is now very easy to recommend even to newcomers which negated most of the need for Brave in the first place.
I opened a GitHub PR to delist Brave, to fulfill their original request, because we (the team) largely agreed it was no longer necessary to recommend.
also:
This is my personal impression of the situation. The reason they cited was they did not want to "respond to all complaints" about Brave Browser from the privacytools.io community.
Brave has historically been a controversial topic in our community, with most users requesting it be delisted and having various reasons for doing so. We (the PTIO team) have always pushed back against those complaints because at that point in time having a Chromium-based option we felt was important for our readers. As Firefox matures to the point where it is easy to recommend for most users, even non-technical ones, we felt that many of the reasons we gave to keep Brave listed on the site were no longer as important.
So, when making the decision to remove Brave from the site, we both took into account all the complaints our community has had with Brave over the years, and the fact that Brave does not want to be associated with us or subject to those complaints in the first place. It made it a fairly easy decision to make, despite the pushback we got from some Brave fans.
https://old.reddit.com/r/privacytoolsIO/comments/cs8foq/update_delisting_brave/
Just to clarify, it looks like Firefox does include:
It doesn't include:
But I think Snowhaze on the otherhand has individual toggles for more features than Brave offers.
Remove
en-US
/, not everyone is a native English speaker.Android is for APK download
@ -36,0 +68,4 @@
website="https://www.bromite.org/"
forum="https://forum.privacytools.io/t/discussion-bromite-browsers/1521"
github="https://github.com/bromite/bromite"
fdroid="https://www.bromite.org/fdroid"
Android for APK download
LGTM after some suggestions 👍
Should we leave off the "- Provides Anonymity" bit?
@ -36,0 +125,4 @@
<h3>Worth Mentioning for iOS</h3>
<ul>
<li>
If we want to leave the "- Provides Anonymity" bit for the Desktop and Android sections, we could add it also here for consistency.
Nah, its good to let people know which browser can actually provide anonymity, instead of just privacy.
@ -36,0 +125,4 @@
<h3>Worth Mentioning for iOS</h3>
<ul>
<li>
I considered doing this before, but because the iOS limitations, i won't as its pretty easy for an attacker to anonymize onion browser users because of these.
What is that
'
doing hereThats me trying stuff to fix the build, after i made on of your suggested commits, the build broke, netlify also indicates that here is something wrong with the Firefox section, I am still trying to figure out whats wrong exactly.
Can you look at the https://github.com/privacytoolsIO/privacytools.io/pull/1256/files#r323505120, eh.
ghiyifuhiefuhiagragragruh
Ok, I guess