Mozilla Firefox

HERE is yet another very interesting article about Mozilla's plans for improving DNS privacy in Firefox (my favorite browser by light years more than any other).

 

Thanks for the link. With the instructions there I was able to turn on DoH in Firefox 61

 

Firefox now supports the newest internet security protocol
August 13, 2018
https://techcrunch.com/2018/08/13/firefox-now-supports-the-newest-internet-security-protocol/

 

About:config

security.tls.version.max = 4

confirms TLS 1.3 enabled

 

Firefox Legacy Add-on removal from Mozilla AMO
August 21, 2018
https://www.ghacks.net/2018/08/21/firefox-legacy-add-on-removal-from-mozilla-amo/

 

Hey, Mozilla (you Google paid developers), try to remove the addons from my hard drive.

 

Since their update mechanism runs as a service, they probably could do anything they want to your hard drive...

 

Except it's not running as a service on my PC

An ongoing comprehensive user.js template for configuring and hardening Firefox privacy, security and anti-fingerprinting

Code:

/* 0303: disable background update service [WINDOWS]
 * [SETTING] General>Firefox Updates>Use a background service to install updates
 * [SETTING-ESR52] Advanced>Update>Use a background service to install updates ***/
user_pref("app.update.service.enabled", false);

 

I didn't figure you had it running based on your previous post. I was mostly bringing it up for the folks that didn't think of it.

 

Good info to know in case of running FF again.

 

Perhaps it's a good idea to make backups of the extensions. I have sometimes experienced that old extensions would not work anymore, out of the blue, even if extensions were set to manual updating. Hopefully this tool will work, haven't checked it out yet:

http://www.snapfiles.com/get/febecleo.html

 

Firefox 62: Firefox Monitor system add-on integration
August 25, 2018
https://www.ghacks.net/2018/08/25/firefox-62-firefox-monitor-system-add-on-integration/

 

omg we al have been pwnd - we alltime need to check this out, thx mozilla for this fortune extension...

 

Firefox Nightly Distrusts All Symantec TLS Certs
August 27, 2018
https://www.bleepingcomputer.com/news/security/firefox-nightly-distrusts-all-symantec-tls-certs/

 

Firefox Public Data Report
Let’s be Transparent
August 28, 2018
https://blog.mozilla.org/blog/2018/08/28/lets-be-transparent/

 

Firefox Nightly Secure DNS Experimental Results
August 28, 2018
https://blog.nightly.mozilla.org/2018/08/28/firefox-nightly-secure-dns-experimental-results/

 

Will I get paid if I let Cloudflare harvest my browsing history via the DNS over HTTPS thing? Is Cloudflare owned by Google?

 

It's funny how it's always the most paranoid that don't really have a clue about anything. "Is Cloudflare owned by Google?" ROFL.

If you're actually interested in learning:
Cloudflare is its own company: https://en.wikipedia.org/wiki/Cloudflare
Mozilla made a special agreement with Cloudflare to make their usage even more private than standard Cloudflare DNS users.
Cloudflare DNS is the fastest and simplest DNS provider in existence. This is always good evidence of a low amount of code (less to exploit) and no forms of filtering. No DNS provider that offers "filtering" (a.k.a. tampering) can be trusted not to ever use this maliciously.
They store usage logs for 1 day only, completely anonymized, and only in RAM, purely for statistical analysis. e.g. "are we being DDoSed"
They have a simple way to contact them about issues and actually respond to resolve issues: https://community.cloudflare.com/c/reliability/1111
They (attempt) to contact owners of badly configured DNS servers, which helps everyone, not just CF users.

I'm sure this still isn't enough for you, but the least you can do is get off your paranoid horse and acknowledge that this act by Mozilla is a GOOD thing for users. They have said they want to add more providers in future, but you can add/use your own providers already. Currently, this is both a major security AND privacy boost for Firefox users, even when using Cloudflare.

 

Mmm, not here it isn't the fastest. Fastest public DNS perhaps.

 

Who is the owner of the company?

DNS over HTTPS bypasses your hosts file and sends information to yet another party (Cloudflare, Akamai, Google, different name same sh*t). I don't see how is this a good thing but you're free to believe in fairy tales.

• What do you think about Cloudflare?
• CDN detection, especially Cloudflare - "Cloudflare itself is very dangerous, government funded MITMed point."

 

Since DNS is necessary how do you use it without revealing your activity to other servers?

 

The big issue with dns over whoever is that it is not up to any browser or cloud provider to be your dns.
It is the job of your isp.
Mrk

 

I'm guessing some people are going to disagree, but my point is it's necessary to trust some provider.

 

You can setup your own DNS server. An example: https://blog.cryptoaustralia.org.au/2017/12/05/build-your-private-dns-server/

 

I was wondering about this It's more than I want to deal with at the moment, but it's good to know it's doable