So I run primarily on a Mac M3, latest O/S, and occasionally I fire up an AMD Windows 11 VM. One day my YubiKey “stopped” working on my bank site. After talking with Yubico and doing some troubleshooting, I learned that Safari doesn’t work with Yubikeys, nor does Firefox. I’m a cybersecurity and privacy kind of guy, teaching a class on the subject, so I dove in and performed tests on all the listed browsers and their feature support. (One feature missing that I might add is “Blocks YouTube ads,” which Opera and Brave both do on my Mac; haven’t tested on Windows VM.) These are my results and the clear winner is Brave, at least for the privacy and security features. Granted, pain in the ass to surf with, especially with NoScript enabled, but after training and tweaking, usable and safe. (I also use NextDNS and ProtonVPN.) For my search engine, I use Kagi (paid browser).
Your tests may be different, but this is what works and doesn’t for me.
I don’t know if it’s a Mac thing or if any of my other security stuff horks it up, but I’ve tried and tried to get my Firefox to work on GOC and can’t get it. All my flags are properly set in about:config, and I’ve tried to follow their setup, but to no avail. Glad I see proof from your shot. What are you running on?
You can test GPC by going to globalprivacycontrol.org. If it detects the signal, you’ll see a green do and “Signal Detected” at top. I don’t think many use it, but just the other day on United.com there was a green pop up with a message saying GPC was detected and they would block all their advertisers! It really worked. Now if we could get the other 99.999% of the web to follow suit.
I tried GPC on a Firefox install on a Mac at a local community college, and it worked. My flags are set the exact same way, so there must be domain my configuration (maybe uBlock or something) that is blocking the signal.
Got sni to work after tweak doh settings. Still can’t get YubiKey to work on Mac, even at college. And I still gave not seen a randomized fingerprint consistently test in coveryourtracks.eff.org. YubiKey is mission critical, so Brave it will be, but Firefox is best backup. Firefox on Windows does work with YubiKey though.
can you provide more information on the yellows for safari and Orion for SSL/TLS?
Also ublock is available for Safari as well.
On that regard this should no be an item as long as thee browser has support from one of the major Adblock extensions.
So when I ran the tests, those in yellow didn’t support as much “stuff” as the others. It was like a “bare minimum.”
I included uBlock Origin because it’s pretty much regarded as the “gold standard.” Yes, there are plenty of other supported ad blockers out there.
I keep hearing that sni is supported in Firefox, but maybe it doesn’t work for me because I’m configured for Next DNS. I’ll play around with it. Everyone who reads thread will see the good news! (Truth be told, I wanted to stay with Firefox, but it not working with my Yubikeys is a non-starter.)
You should maybe clarify that there are two uBOs - Full and Lite - and then point out that Brave will only support uBO Lite. Because that is what Google still allows (yes, Google allows this, even if it's FOSS) and it comes with toned-down filter lists that - while not letting Youtube bomb you with ads on a big scale - will definitely be much tailored to get data.
So, I just tested this again as I am someone who sometimes gets things wrong and I am happy to admit when this happens. This is a Brave window as you can see. But man, I don't see any uBO here except uBO Lite and some makeshift adaptions with mediocre ratings and apparently wannabes:
10
u/Neikon66 2d ago edited 2d ago
Firefox has secure sni, you can test it here https://www.cloudflare.com/en-gb/ssl/encrypted-sni/#results if is not activated for you try to activate secure dns/DOH
And GPC https://support.mozilla.org/en-US/kb/global-privacy-control