Konform Browser Drops v140.7.1-100: Stopping Addon ID Leaks and Adding Alpine/Arch Support
Konform Browser released version v140.7.1-100, bundling Firefox ESR 140.7.1 security patches alongside major usability and privacy overhauls. The release notably addresses a previously unfixable vulnerability—identity leaks from unique IDs within addon-sent HTTP Origin headers (Mozilla Bugzilla ID: 1405971).
Users are pointing out the new granular privacy control, letting users select privacy modes from 'Purely Private' down to 'yolo mode' via the welcome screen. Developer 'ken' detailed the enhanced control, noting the new `network.http.addonOriginBehavior` preference setting, while also announcing expanded Linux package support for Alpine and Arch beyond the existing deb/rpm formats.
The weight of opinion centers on the concrete security and control gains. The core focus is on Konform's ability to block the specific identity leak vector that upstream Mozilla failed to patch, suggesting the browser positions itself as a superior, necessary fork for privacy-conscious users.
Key Points
#1Major fix for identity leakage via Origin headers.
The browser plugs a 'wontfix' vulnerability (Bugzilla ID: 1405971) that exposed unique addon IDs, a key technical win.
#2Introduction of tiered privacy settings.
Users can now choose a privacy profile ranging from 'Purely Private' to 'Just Make It Work' directly on the welcome screen.
#3Expanded Linux distribution reach.
Konform is now offering binary packages for Alpine and Arch Linux, broadening its appeal beyond traditional package managers.
#4Fine-grained Origin behavior control.
A new preference, `network.http.addonOriginBehavior`, gives users manual control over how addon origins are reported.
#5Potential default shift for fingerprinting defense.
Future updates may change the default origin reporting behavior to random values (3), improving resistance against fingerprinting.
Source Discussions (3)
This report was synthesized from the following Lemmy discussions, ranked by community score.