Confirmed users
425
edits
Security/Fusion: Difference between revisions
update links
(add caption to new fox image) |
(update links) |
||
| Line 5: | Line 5: | ||
[[File:Fusion3_small.jpg|right|400px|thumb|Fox protected by onions]] | [[File:Fusion3_small.jpg|right|400px|thumb|Fox protected by onions]] | ||
The Firefox and Tor Browser teams are long-time collaborators. The Tor Browser team builds [https://www.torproject.org/ | The Firefox and Tor Browser teams are long-time collaborators. The Tor Browser team builds [https://www.torproject.org/download/ Tor Browser] by adding privacy-enhancing patches to [https://www.mozilla.org/en-US/firefox/organizations/ Firefox ESR]. When this process first began, the Tor Browser team would have to update these patches each time a new version of Firefox was released, which was very time intensive. | ||
In 2016, we started the [ | In 2016, we started the [[Security/Tor_Uplift|'''Tor Uplift project''']] to take the Tor Browser patches and "uplift" them to Firefox. When a patch gets uplifted, the Firefox team takes the change Tor Browser needs and adds it to Firefox. These changes in Firefox are disabled by default but can be enabled in preferences. Because preferences can be changed rather than updating each patch, the Tor Uplift project saves the Tor Browser team a lot of work. | ||
The primary targets of the Tor Uplift project were two features: [ | The primary targets of the Tor Uplift project were two features: [[Security/FirstPartyIsolation|'''First Party Isolation''']] and [[Security/Fingerprinting|'''Fingerprinting Resistance''']]. First Party Isolation was shipped in Firefox 52 (off by default); the MVP of Fingerprinting Resistance will be shipped in Firefox 59 (also off by default). | ||
Tor Uplift also gives the Firefox team a way to experiment with the advanced privacy features that Tor Browser team is building, to see if we can bring them to a much wider audience. That's the goal of '''Fusion''', the next big step of the collaboration between Mozilla and Tor. | Tor Uplift also gives the Firefox team a way to experiment with the advanced privacy features that Tor Browser team is building, to see if we can bring them to a much wider audience. That's the goal of '''Fusion''', the next big step of the collaboration between Mozilla and Tor. | ||
| Line 48: | Line 48: | ||
== Project Lists == | == Project Lists == | ||
=== Tor Uplift === | === Tor Uplift === | ||
The [ | The [[Security/Tor_Uplift|'''Tor Uplift''']] project is aimed at landing all Tor Browser patches so that Tor can directly use Firefox main trunk instead of a fork. | ||
=== First Party Isolation === | === First Party Isolation === | ||
The [ | The [[Security/FirstPartyIsolation|'''First Party Isolation''']] project is part of the Tor Uplift initiative. <br> | ||
It implements one of the Tor Browser core features ([https://www.torproject.org/projects/torbrowser/design/#identifier-linkability Cross-Origin Identifier Unlinkability]). <br> | It implements one of the Tor Browser core features ([https://www.torproject.org/projects/torbrowser/design/#identifier-linkability Cross-Origin Identifier Unlinkability]). <br> | ||
First Party Isolation (also called "double keying") was incorporated in Firefox 52 with the preference '''"privacy.firstparty.isolate"'''. It provides a very strong anti-tracking protection by preventing third parties from tracking users across multiple sites. | First Party Isolation (also called "double keying") was incorporated in Firefox 52 with the preference '''"privacy.firstparty.isolate"'''. It provides a very strong anti-tracking protection by preventing third parties from tracking users across multiple sites. | ||
=== Fingerprinting Resistance === | === Fingerprinting Resistance === | ||
The [ | The [[Security/Fingerprinting|'''Fingerprinting Resistance''']] project is part of the Tor Uplift initiative. <br> | ||
It implements another Tor Browser core feature ([https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability Cross-Origin Fingerprinting Unlinkability]). <br> | It implements another Tor Browser core feature ([https://www.torproject.org/projects/torbrowser/design/#fingerprinting-linkability Cross-Origin Fingerprinting Unlinkability]). <br> | ||
Fingerprinting Resistance (also called "anti-fingerprinting") was incorporated in Firefox 59 with the preference '''"privacy.resistFingerprinting"'''. It is a defense against browser fingerprinting, which is a widely used Web tracking technology to identify individuals. | Fingerprinting Resistance (also called "anti-fingerprinting") was incorporated in Firefox 59 with the preference '''"privacy.resistFingerprinting"'''. It is a defense against browser fingerprinting, which is a widely used Web tracking technology to identify individuals. | ||