Re: If FOSS isn't your number one concern, why use IceCat?

[Haniho Dude]

That sounds like an excellent step in the right direction. When all is said and done, I'd love to see the details of the results. In fact, I would've been happy with less! All I want is to know where we currently stand, but you're offering far more!

Thanks.

---

From: Mark H Weaver <address@hidden>
Sent: 20 November 2019 22:34
To: Haniho Dude <address@hidden>
Cc: address@hidden <address@hidden>
Subject: Re: If FOSS isn't your number one concern, why use IceCat?

 

Hi Philip,

Haniho Dude <address@hidden> wrote:
> This is indeed great news; it fully addresses the original concern that
> made me ask my questions.  However, it does not answer the questions
> themselves:
>
>   * Other than the components that exist only to make IceCat FOSS and
>     the addons that any Firefox user can obtain, what does IceCat offer
>     that cannot be obtained by using a privacy-hardened user.js file?

I'm not yet able to give a proper answer to this question, as I'm
currently familiarizing myself with the privacy issues in Firefox and
studying the relevant source code.  I can tell you that I do not intend
to limit myself to reading existing privacy guides and changing default
settings (as in data/settings.js).  Where appropriate, I will patch the
source code itself.  For example, I've already added code to the
IceCat-68 preview to expose more privacy settings in a user-friendly way
within <about:preferences>, and I intend to do more of that,
e.g. exposing DNS-over-HTTPS configuration there.

I may also modify the code to add support for new low-level settings
that don't yet exist within <about:config>.  For example, at present, I
believe there's no way to allow _javascript_ to know your local time zone
without disabling "privacy.resistFingerprinting" entirely.  So, we
currently have this one option that covers a great many things, and I'd
like to allow more fine-grained control.  That's not something that can
be done in user.js as far as I know.

I'm only just beginning to dig into the issues and study the code, but I
expect that over time IceCat will not only have better default settings,
but allow better configuration of your desired tradeoffs between privacy
and functionality.

      Mark