Not affiliated with Waterfox at all, but I am a user, and this seems like great news for me.

  • @railsdev@programming.dev
    link
    fedilink
    10
    edit-2
    10 months ago

    Sidetrack: I really wish OS vendors would support DNS over TLS (and maybe DoH, I just prefer the former).

    I understand that on a LAN the router is typically acting as the DNS server but I don’t see why the OS couldn’t be smart enough to automatically detect DNS over TLS on the standard port when overriding the DNS settings manually.

      • @railsdev@programming.dev
        link
        fedilink
        1
        edit-2
        10 months ago

        I can’t speak to Android but all of those require running some DNS recursive resolver locally then pointing the OS resolver to it. While I do that already, it doesn’t really address the issue I’m getting at: the OS doesn’t natively support it.

        On macOS/iOS I use a .mobileconfig file to point to my Dockerized DNS over TLS resolver in the cloud and it works great, but why do I need to do that rather than use the “normal” DNS preferences? Command line tools still revert to the DHCP DNS server so on macOS I run unbound to take care of that.

        For Linux, I’m mainly running a Raspberry Pi on Alpine Linux with unbound as well; it works great for DHCP clients that get pointed to it but (especially if this were some company LAN) all the DNS queries are still going over the LAN unencrypted.

  • Mr. Forager
    link
    fedilink
    4
    edit-2
    10 months ago

    This sounds good! Although not a waterfox user, are there any other good reasons to try it out over hardened firefox?

    • @ReversedCookie@feddit.de
      link
      fedilink
      210 months ago

      Hardened Firefox has better privacy protections, while Waterfox is more like a browser focused on customization, design, performance and privacy without a lot of breakage. So it's a good browser for "normal" people, but if u want smth more secure try smth like LibreWolf.

      • UnfortunateShort
        link
        fedilink
        19 months ago

        There is also Mercury, which claims to combine quite a lot of the nice stuff from different FF forks. I personally stick to the original, but it might be worth checking out.

        • @ReversedCookie@feddit.de
          link
          fedilink
          19 months ago

          Thank you for sharing! I checked it out. It's basically a random Mix of a bunch of different Firefox Forks, I wouldn't recommend it for normal users or people who want the best privacy they can get with Firefox, is better than the Vanilla Firefox ig, but I don't see any real sense using it.