Firefox Offers the Same Security Features as the Tor Browser

This article examines Firefox Offers the Same Security Features as the Tor Browser. It presents the main facts, practical implications, and key points in a clearer, easier-to-follow format.

Canvas Fingerprint is a method used by advertising companies to track users. Blocking this feature will be an important addition to user privacy protection methods in Firefox.

Canvas Fingerprint Has Become Popular in Recent Years

This method has been popular in recent years after the EU forced websites to display cookie popups. Because this method does not need to store anything on the user's browser, minimizing complicated legal issues is very popular with advertisers.

The Canvas Fingerprint works by loading an HTML Canvas marker inside a hidden iframe, allowing the browser to display a series of elements and text. The generated image will be converted into a hash file.

Each browser has a different display so it can track the user's browser when he visits different pages. Interested readers can learn more about this method.here.

Borrow a Feature from the Tor Browser

Tor Browser solves this problem by default to block websites from accessing canvas data. The browser will display popup every time the page wants to access the canvas element.

Mozilla engineers are planning to notify users with a popup every time the page wants to retrieve data from HTML, similar to asking the right to use webcam and microphone.

Firefox 58 plans to release on January 16, 2018.

The Second Feature Firefox Takes from Tor

This is the second feature Mozilla borrowed from the Tor Project. Previously, Firefox 52 had a mechanism for not allowing websites to track users through system fonts.

The effort to make Firefox more solid is part of the Tor Uplift project, which initiatives to bring Tor Browser privacy features to Firefox. Tor is built on Firefox ESR and often takes features from Firefox.

In August 2016, Mozilla blocked a list of trace script host URLs. Earlier, Firefox also removed Battery Status API to improve user privacy.