From a7b1b245f0ea8b11aaf7fe5d2d1eef61a9210f9d Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Tue, 16 Apr 2024 03:54:53 -0500 Subject: [PATCH] https://discuss.privacyguides.net/t/proposal-drop-gecko-browsers-on-android-due-to-security-concerns-and-add-reasoning/17840/82 --- docs/mobile-browsers.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/docs/mobile-browsers.md b/docs/mobile-browsers.md index 1b20d9cb05..51f373d994 100644 --- a/docs/mobile-browsers.md +++ b/docs/mobile-browsers.md @@ -153,12 +153,12 @@ Brave allows you to select additional content filters within the internal `brave

Danger

-Firefox (Gecko)-based browsers on Android [lack](https://bugzilla.mozilla.org/show_bug.cgi?id=1610822) per-site [process isolation](https://wiki.mozilla.org/Project_Fission),[^1] a powerful security feature that offers additional protection against a malicious website exploiting a security vulnerability.[^2] Chromium-based browsers like [Brave](#brave) will provide more robust protection against malicious websites. +Firefox (Gecko)-based browsers on Android [lack](https://bugzilla.mozilla.org/show_bug.cgi?id=1610822) [site isolation](https://wiki.mozilla.org/Project_Fission),[^1] a powerful security feature that offers additional protection against a malicious website exploiting a security vulnerability.[^2] Chromium-based browsers like [Brave](#brave) will provide more robust protection against malicious websites.
-[^1]: This should not be mistaken for per-site *data* isolation (dynamic [first party isolation](https://2019.www.torproject.org/projects/torbrowser/design/#identifier-linkability)) or [state partitioning](https://developer.mozilla.org/en-US/docs/Web/Privacy/State_Partitioning), where website data such as cookies and cache is restricted so that a third-party embedded in one top-level site cannot access data stored under another top-level site. This is an important privacy feature to prevent cross-site tracking and **is** supported by Firefox on Android. -[^2]: GeckoView [does not](https://bugzilla.mozilla.org/show_bug.cgi?id=1565196) take advantage of Android's [isolatedProcess](https://developer.android.com/guide/topics/manifest/service-element#isolated) flag either, which would further isolate the process from the rest of the system. +[^1]: This should not be mistaken for [state partitioning](https://developer.mozilla.org/en-US/docs/Web/Privacy/State_Partitioning) (or dynamic [first party isolation](https://2019.www.torproject.org/projects/torbrowser/design/#identifier-linkability)), where website data such as cookies and cache is restricted so that a third-party embedded in one top-level site cannot access data stored under another top-level site. This is an important privacy feature to prevent cross-site tracking and **is** supported by Firefox on Android. +[^2]: GeckoView also [does not](https://bugzilla.mozilla.org/show_bug.cgi?id=1565196) take advantage of Android's [isolatedProcess](https://developer.android.com/guide/topics/manifest/service-element#isolated) flag, an Android feature which allows an app to safely run less trusted code in a separate process that has no permissions of its own. Enable DivestOS's [F-Droid Repo](https://divestos.org/fdroid/official) to receive updates directly from the developer. Downloading Mull from the default F-Droid repo will mean your updates could be delayed by a few days or longer.