logo

blog

My little blog can’t be this cute!
commit: d38bf18d9927c7f6270963e6c45fbaf35ba60e85
parent: 263d8abe0571294b44a7946cbcc909fcc9289059
Author: Haelwenn (lanodan) Monnier <contact@hacktivis.me>
Date:   Fri, 24 Aug 2018 22:10:58 +0200

Thanks Mozilla for DNS over HTTPS

Diffstat:

Marticles/Mozilla is Broken.html4+++-
Marticles/www-client are broken.html1+
2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/articles/Mozilla is Broken.html b/articles/Mozilla is Broken.html @@ -2,7 +2,9 @@ <p>I’m quitting Mozilla, not that I have been really been into the community(mostly because they want me to do one thing, apply this to programs, not humans) but I was using and enjoying it for a long time(like since 2008). Also in about 2014 I switched from Thunderbird to mutt because I wanted something simple which does GPG, hard time to switch but I love it. And now it seems like Mozilla is killing Firefox for years :</p> <ul> <li>Version numbering doesn’t mean anything(patches, big change, small change, security update ?)</li> - <li>Have a very bad privacy and security (look at the differences between tor browser and Firefox)</li> + <li>Have a very bad privacy and security (look at the differences between tor browser and Firefox)<ul> + <li><code>about:config</code>-only: <a href="https://blog.nightly.mozilla.org/2018/06/01/improving-dns-privacy-in-firefox/"><abbr title="Domain Name System">DNS</abbr> over HTTPS to Cloudflare</a></li> + </ul></li> <li>No more choice for the user<ul> <li>Old one : JavaScript can’t be configured</li> <li>OpenH264(non-free) is installed by default</li> diff --git a/articles/www-client are broken.html b/articles/www-client are broken.html @@ -11,6 +11,7 @@ <li>Compiles and works without systemd and pulseaudio, works with LibreSSL, bonus if no dbus hard-dependency.</li> <li>Privacy/Security:<ul> <li>No calling home without prior free consent(i.e. health report, search suggestions)</li> + <li>No proxying/DNS over Whatever/Auto-VPN/… without configurability</li> <li>Does <b>not</b> implements their own crypto and supports current best practices/algorithms</li> <li>per-domain blocking of requests by their type(cookies,css,images,media,xhr,scripts,…) and domain (as seen in uMatrix)</li> <li>blocking of request by their URL (as seen in uBlock)</li>