- cross-posted to:
- arch@programming.dev
- archlinux
- cross-posted to:
- arch@programming.dev
- archlinux
There is a new Firefox fork in town: Konform Browser. Its focus is privacy, security and user freedom. Yes, I know this sounds familiar - but hear me out, I do think we have something to bring to the table!
The project started as a fork of LibreWolf and now stands on its own four feet.
Some highlights to give an idea to those familiar with LibreWolf or other FF fork:
- Security: Konform is based on Firefox ESR. This means a more stable base without missing out on the latest security updates, in exchange for longer time waiting for the newest features from Firefox. It also enables shorter lead times to backport upstream updates.
- In this sense (and a few others), Konform Browser is closer to IceCat/GNUZilla than it is to Librewolf.
- Freedom: Konform allows a higher level of customization. It gives the user control and trusts you with that responsibility. Some examples:
- Allows enabling dark mode and following system theming even when Resist Fingerprinting is enabled.
- Allows installing your own self-built unsigned add-ons
- “Spoof referer source” user configuration option
- Privacy and security: Disables all browser features relying on external network connections.
- “RemoteSettings” is completely disabled1.
- No cloud “AI” integrations. You can run Konform on a disconnected network and not notice any reduced functionality.
- All telemetry, metrics, and ads from the browser disabled.
- OCSP turned off (but we have CRLite).
- tcpdump and see the difference
I should add that even if we contrast with LibreWolf above, this is not at all meant as a dig or criticism. That we chose it as base and that it’s the easiest to compare with is a testament both to how closely aligned we are and that Konform has a lot to thank Librewolf and the wider Firefox customization community for. Like they built from Librefox and Arkenfox to bring private browsing to a wider audience, so are we but the next to try help widen and deepen the browser ecosystem.
The recommended installation method is building from source but there are also binary packages for x86_64 built by Codeberg CI. Currently Linux only, considering Android next and could use some assistance with that.
Doors open for users, testers and contributors. Looking forward to hear what you think and if there’s anything missing.
1: This means that local full-page translation is also unavailable even if in principle it should be possible to bundle and run translations fully locally. It’s just the way Mozilla built it. Patches towards allowing users to enable fully offline translations would be very welcome.
Sources: https://codeberg.org/konform-browser
See releases for details.
Having more options is always good.
The name is not a wordplay with some form of lupine or canine animal, then no deal.
Jokes aside, taking note of it. 👀
If only… What does fox say?
Ding ding ding ding ding !
Allows enabling dark mode and following system theming even when Resist Fingerprinting is enabled.
So, basically defeating the point of RFP?
There is a longer discussion to be had about both what RFP does, how effective it is, and the relative impact on entropy of this particular feature.
For now I will just say that this: Providing configuration for this serves the projects goal of user control and freedom. It should be up to the user to make that call. Us as developer shouldn’t unilaterally decide on behalf of everyone. We can’t think of everything and we don’t always know best. Of course we can still provide guidance and put what we believe is sensible as defaults. I find it odd to criticize empowering users in this way, in particular considering the status quo.
Were it up to me, everyone should have Letterboxing on by default, probably with similar reasoning. I don’t see why you wouldn’t use it. Everyone enabling it would make us all (ever so little) less fingerprintable. Arguably more meaningful impact than dark/light-theme. And less of an accessibility issue. Even so, we still leave this configurable in the same way as the dynamic theming.
You can also see this way of thinking reflected in allowing loading of your own add-ons from file and allowing userChrome customization. Probably niche power-user features with risks involved and sharp edges exposed but we are developers and maintainers of software, not your sysadmins1 or caretakers2.
If you fundamentally disagree, well, not all software has to be for everyone. Probably there is already something else (like Tor Browser) that serves your needs and aligns with your philosophy better?
1: …xcept… you want us to be your sysadmin? 👉👈 Call me when you close that seed round bb 😘
2: Nope.
Just, uh, don’t turn on dark mode then?
I want dark mode. I’m going to turn it on.
are you planning to push it to nixpkgs as well so that Nix/NixOS users can acquire it? :)
I’d like to try it
I’m so glad you want to try!
The problem with both that and Flathub is that I can’t seem to pass Githubs signup CAPTCHA whatever I tried (and yes I tried other browsers too lol). Besides, having my old account there arbitrarily blocked on phone number verification in the past, not feeling super keen on having users rely on them for updates, even putting aside whatever I feel about Microsofts and GitHubs role in the ecosystem in general…
However, if anyone would be up for the literal push-part of pushing it up and wouldn’t mind collaborating a bit in the process, would be happy to make that happen together (or use your privilege if you’re motivated; it’s free software yo, just heed the license ;)). There is an Issue thread for coordinating if this is you.
I don’t think it should be too involved as the source repo and source tarballs are built in pretty much the same way as LW, which already has a derivation in nixpkgs. Didn’t look closer at that derivation but hopefully shouldn’t be much more than copying
pkgs/applications/networking/browsers/librewolfand replacing some strings.
Can I ask why you decided to fork Librewolf?
An AppImage or Flatpak would be great for us atomic users. Maybe you are considering that in the future.
Can I ask why you decided to fork Librewolf?
I wrote a bit of the "why"s already in the OP. Could expand further for you but what do you have in mind? “Why did you choose librewolf as upstream”, “why fork and not another approach”, “why bother with any of this at all”, …?
Flatpak
Flatpak is something we want and have been looking at already. See here for what’s holding that back. There is already an (untested) repo for it.
Appimage.
While AppImages can be very convenient, we are ambivalent on some their security aspects among other things. Currently not prioritizing it until we have what we consider generally more solid options covered but will consider outside contributions if anyone feels motivated and puts in the effort to makes it happen.
Issue thread for new distribution targets where interested Codeberg users can follow up: https://codeberg.org/konform-browser/source/issues/9
for us atomic users
I see why users prefer flatpaks or appimages but just for consideration some ways I can think of one could run it on an atomic distro today:
toolbxstyle running the browser in a rootless podman container 1- Haven’t tried straight up installing it in an actual toolbox container so not sure how well that works but maybe it’s worth a try if that’s something you already use?
- For the Fedora family, should be straightforward to install an
.rpmin your overlay - Run the app from the binary tarball directly on the host, installing it on a user mount somewhere 2
- Use the source, Luke. Build it. 3
1: Would anyone actually use it if there was a
Containerfilefor it? We currently don’t have a public one but I can attest this works fine in general and if people indicate interest for it I think it’s a neat idea that Konform Browser could provide that as an option.2: I think this is fine for testing and short-lived installations but unless you are technical enough to reason about the trust involved and automate for verified updates (or at least getting notifications for them), I wouldn’t recommend it for long-term (>= months) installations so that you don’t get stuck on unpatched versions without thinking about it. This is the least secure way to run it. Not generally recommended for non-technical users.
3: Something I recommend becoming more familiar with in general if one has the time, resources, and patience. The catch with updates applies here too if this is for production use.
Update: There is now a Containerfile producing images using the prebuilt
.debif anyone wants to try the container-based approach to run Konform Browser in podman or docker or whatever. Some basic testing done using rootless podman under either Wayland and X11 on Kinoite and both ran fine.https://codeberg.org/konform-browser/oci
If you want it to have the dark theming activate depending on your desktop theme it should work by adding
-v ${HOME}/.config/gtk-3.0:/home/user/.config/gtk-3.0:ro,z. Or-v ${HOME}/.local/share/konform-browser-1:/home/user:Zfor an isolated persistent homedir (similar to Tor Browser).






