Mozilla Firefox Browser Stable Version Releases

Thanks. I use Firefox on my Windows 10- thing is my main systems are all Windows 8.1 which continues to please. Those are Chrome

 

I have a question:

https://www.bleepingcomputer.com/ne...cross-site-tracking-by-default-for-all-users/


Will W. members using Firefox continue to block third-party cookies or not?

 

I continue to block all third-party cookies.
It doesn't break any functionality useful to me on sites that I visit, so I see no reason not to block all third-party cookies.

 

same here.

 

Thank you both for your response.
So both of you have "Enhanced Tracking Protection" enabled in "Custom Mode"?

 

https://librewolf.net/docs/faq/ explains the advantages of using Strict Mode. TLR: Strict mode enables dFPI and Custom mode disables it and all the other benefits that come with it.

Also, for more info see this: https://gitlab.com/librewolf-community/settings/-/issues/149#note_873599441
Note: LibreWolf is configured to clear all cookies on exit.

I use Strict mode because of all the benefits. If you decide to use Custom mode and block third party cookies then it makes sense to enable FPI in about:config

 

So you need to use Custom mode to disable all third party cookies vs. Strict mode?

 

Yes.

 

i can only speak for myself but yes, you got that right.

 

Same for me, in Firefox settings, Privacy & Security, Enhanced Tracking Protection, I use 'Custom' settings, in which I set to block all third-party cookies.

It took me a couple of minutes to find that dFPI stands for 'dynamic First Party Isolation'.
After some reading, it's still not clear to me if there is a real benefit in using Firefox 'Strict' setting over 'Custom' with all third-party cookies blocked.

 

Thank you all.
So my hunch was correct.
Anyone who decides to block third-party cookies in Firefox (Custom) gives up Total Cookie Protection + Enhanced Cookie Clearing.

Which it seems to me are the 2 most important benefits.

Now the question is which user is more securely protected and also privacy side of the 2?
The one with ETP "Strict" or the one with ETP (custom) "3rd party cookies disabled"?

P.S. dFPI = Total Cookie Protection

P.S.1

In my opinion, those who use in Firefox ETP -Strict Mode.

However rather brainless this mechanism in Firefox,I hope it will be different in chrome based browsers.

 

Thanks for the confirmation. Cheers.

 

i have "custom" in use since it was available, and had no problems. so i use the announced extended security for cookies for a long long time now. it extends site isolation, which was introduced before.

 

Correct.

Probably a toss-up.

(Also in reply to) @Stupendous Man Maybe just a matter of preference. Strict is "automatic" requiring only selection of the option by the user. Option 2 Custom would require about:config change to first party isolation, tweaking referrers, etc. to even approximate Strict. For my money, if LW devs recommend option #1 it makes sense to use it. They (the devs) are advanced tweakers and if they're advising it I take it that means something.

And from the info in 2nd reference in my above post:

Maybe someone on the Mozilla forum could ask for official explanation of the difference between option 1 and 2.

 

This more detailed description of partitioning may also be helpful to some users: https://developer.mozilla.org/en-US/docs/Web/Privacy/State_Partitioning#dynamic_partitioning=

 

I am on Firefox 100.0.2. I just noticed when clicking to download an exe or a file while on a webpage, the download starts right away after clicking to download. Before, the Firefox behavior when clicking to download something was to pop up a prompt asking what to do. I havent changed anything in Firefox settings and I want the prompt back. Was this behavior changed recently? Is there anything that can be done, via about:config, perhaps?

Bo

 

Thanks, JR. Now that you show me about the change in behavior, I remember reading about it here at the forum at the time but had totally forgotten about it. I updated to Firefox 100.0.2 from 97 on May 23rd, I kind can't believe it took me this long to realize the change.

I don't mind files in general to be DL automatically when clicking to download but exe's is the exception. Do you know, if I update to latest Firefox version, does the prompt comes back without me having to change anything else in Settings, or do I have to change something else in Settings for the prompt to comeback?

Bo

 

Yeah, I think I found what I wanted (the option for setting to ask). Thanks, JR. I ll update in a little while.

Edit: DL is back to normal.

Bo

 

Thanks, I have disabled the old First Party Isolation and set it to Strict. A shame you can't combine that with blocking 3rd party cookies.

How the automatic access works:

I wonder If sites could abuse this to be allowed access.
You can disable this, but that will of course also break legitimate sites:

 

I don't know.

Do you mean in the same way as Privacy Badger's heuristics could be abused?

 

No Privacy Badger was abused to make it able to fingerprint specific users.
I just mean whether the heuristics can be 'abused' to allow access to the unpartitioned storage. For example it says access can be allowed if there is user interaction. If you want to watch videos, on quite a few sites you have to close an ad first covering the video before you can play it, or it plays an video ad first and you have to click 'play video' after that, or there is a Skip button to skip the video ad. So then there is user interaction with ads/trackers(those are not blocked by an adblocker, at least not uBlock)which might then get access.