LWN: Comments on "Firefox 66 released"

Client certificate support

pabs — Wed, 27 Mar 2019 04:17:39 +0000

I expect it is more likely that Mozilla/Chrome etc will remove support for client certificates entirely (switching to Webauthn instead) than to put any effort into fixing the *terrible* UI they have or to add support for more use cases.

Firefox 66 released

higuita — Tue, 26 Mar 2019 14:29:20 +0000

it is not the same, but you have the add-on superstop, it will stop all javascript, animations and other trash. Recommended!

Client certificate support

morhippo — Tue, 26 Mar 2019 10:34:01 +0000

Too bad firefox still does not support client certificates stored in the windows certificate repository (unlike chrome). This makes it impossible for many corporate users (like me) to use this as default browser. See https://bugzilla.mozilla.org/show_bug.cgi?id=1120350

I would love it if the mozilla organization put its focus on these basic things, please, instead of avantgarde things like " passwordless windows hello for windows 10"?

Firefox 66 released

mjthayer — Tue, 26 Mar 2019 06:52:53 +0000

> Quite right. There's been URL-spoofing attacks (in *2019*!) that rely on big-name mobile browsers truncating the hostname from the wrong end. If a trillion-dollar AI company can't get that right, it's obviously the wrong approach.

I wonder what percent of users would spot this though. I would be interested to hear a comment from a Firefox developer (roc?)

Firefox 66 released

flussence — Mon, 25 Mar 2019 21:18:30 +0000

Quite right. There's been URL-spoofing attacks (in *2019*!) that rely on big-name mobile browsers truncating the hostname from the wrong end. If a trillion-dollar AI company can't get that right, it's obviously the wrong approach.

Firefox 66 released

Wol — Fri, 22 Mar 2019 21:26:21 +0000

> If someone is thinking that it is good to see the URL to check that it is what it should be, I would say that those checks can possibly be done better by algorithms.

And how on earth is the algorithm supposed to know what the url is supposed to be?

Pages re-direct and re-write urls all the time. IME AI is *useless* at knowing what I want (eg pretty much ALL Thunderbird scam warnings I see come up on legit emails that don't even have anything that looks scammy to me !!!).

I seriously would NOT trust ANY form of AI to check whether an URL "looks right".

Cheers,
Wol

Firefox 66 released

karkhaz — Fri, 22 Mar 2019 14:27:43 +0000

(thread author here) so I for one don't actually claim that this feature wasn't worth the cost.

It will make Firefox even faster for all of its users. This is so welcome because what has been holding back Firefox's adoption for so long was its slow pre-Quantum user experience. So hurrah for that.

It will inconvenience me and the four other people in the world who care enough about their extension configurations to version them. Boo-hoo, but several people have pointed out that git has an answer to this. I had actually made up my mind to write a script that would transparently encode my JSON files as a database, and whenever an extension writes to the database, I get a (JSON) pull request by email which I can accept or not. But several commenters ruined my fun by pointing out that such a tool already exists.

I do this with git fairly frequently. For years I had maintained a script which automated the process of binary-searching a sequence of commits to find the one that introduced a bug. It started off as a shell script, then I rewrote it in ruby, then I rewrote it in python when I forgot ruby. Then somebody told me about git bisect. I should skim every single git man page at some point, I bet there are more gems.

(Speaking of which. April Fools' Day approaches. I'll leave this Markov-chain based git man page generator here so that people can torment their SVN-using friends: https://git-man-page-generator.lokaltog.net/)

Firefox 66 released

nilsmeyer — Fri, 22 Mar 2019 10:57:13 +0000

I agree, I would rather have a media whitelist for sites like youtube, netflix, prime. Bonus points for not even loading the media.

This would be even more useful for mobile devices where data transfer is ridiculously expensive.

Firefox 66 released

mjthayer — Fri, 22 Mar 2019 10:10:58 +0000

I am slightly split about tabs in the title bar, which is the default at least on Ubuntu. Some GNOME applications have taken to putting the sandwich menu button and similar buttons (for Firefox this would be back, forward, reload and so on) into the title bar. I am wondering whether that would have been nicer - and keeping a title bar and the separate tab bar, but hiding the URL field except when it is needed for typing something in.

If someone is thinking that it is good to see the URL to check that it is what it should be, I would say that those checks can possibly be done better by algorithms.

Firefox 66 released

leromarinvit — Fri, 22 Mar 2019 09:40:51 +0000

At least for videos (including silent ones), media.autoplay.default=1 and media.autoplay.allow-muted=false works for me. The only annoyance is that it breaks the player UI on many pages, since they expect the video to auto-play.

image.animation_mode=none should prevent animated GIFs from playing, though I haven't tried it. No idea about CSS animations.

Firefox 66 released

leromarinvit — Fri, 22 Mar 2019 09:30:26 +0000

Interesting to see what they consider a worst-case stress test (and, by extension, what would be considered typical usage). I guess I'm not a very typical user then, seeing as I currently have 47 tabs open - but only because I cleaned up most of my open tabs a few days ago. It's not uncommon for me to have several hundred...

Firefox 66 released

flussence — Fri, 22 Mar 2019 06:55:13 +0000

Now if only they'd extend that to autoplaying silent video, animated images, CSS animations…

I'm starting to miss SWF already. At least it had a stop button.

Firefox 66 released

mathstuf — Thu, 21 Mar 2019 21:52:20 +0000

Git has smudge filters to extract the relevant information for efficient storage in Git's object store. I assume someone has done something like that for sqlite databases somewhere. Not saying that it'd be easy since I assume there's one extension database, not one per extension.

Firefox 66 released

nybble41 — Thu, 21 Mar 2019 15:02:52 +0000

This process can be automated with Git filters; for example:

http://share.find.coop/doc/tutorial_git.html#tutorial_git...

Firefox 66 released

ptman — Thu, 21 Mar 2019 14:08:47 +0000

Maybe you can still dump the (sqlite?) database to a file and version control that dump?

Firefox 66 released

fredrik — Thu, 21 Mar 2019 07:56:56 +0000

I apologise, my comment wasn't intended as a snide remark about karkhaz's interesting use case.

Rather I meant it as an observation about how developers never can expose any api, whether intentional or unintentional, to users without exposing their product to either ossification or disapointment when the api is modified.

Firefox 66 released

sionescu — Thu, 21 Mar 2019 03:53:30 +0000

I don't doubt it makes things faster, only that making things somewhat faster was not worth losing the ability to manage configs through a version control system.

Firefox 66 released

roc — Thu, 21 Mar 2019 01:41:38 +0000

If the extension has per-site settings then it's entirely believable files would be re-read on each page load.

But honestly, if Mozilla engineers make a change and claim it's because it makes things measurably faster, why wouldn't you give them the benefit of the doubt? Or at least go look in the relevant Bugzilla bugs to see what they say they did and measured, before casting doubt on it?

Firefox 66 released

k8to — Wed, 20 Mar 2019 20:21:09 +0000

I think this is because we designed extensions as loading javascript in the page content, and the page renderer needs to be isolated. Thus I'd assume we start with a fresh context for each page for security reasons, and thus we launch the extension anew and it reads the data (via firefox interfaces) directly.

It's certainly true that the data could be read via some shared firefox mechanism from a config cacher or whatever to the renderer process, skipping the need to have a specialized datastore, but maybe this was easier to do?

Firefox 66 released

jeffcook — Wed, 20 Mar 2019 19:17:15 +0000

Seems a bit unfair. How much of a speed-up does the change really represent? Unless Firefox was reloading the settings from disk on each page load, it doesn't seem like keeping them in discrete files would cost much.

Firefox 66 released

fredrik — Wed, 20 Mar 2019 18:49:43 +0000

Obligatory https://xkcd.com/1172/

Firefox 66 released

lkundrak — Wed, 20 Mar 2019 13:29:40 +0000

Yes! This could be done via an about:config option, but there was no whitelist.

Firefox 66 released

zwol — Wed, 20 Mar 2019 11:26:16 +0000

It's personally gratifying to see this get done. I worked for Mozilla briefly about ten years ago (2008-2010ish). On my first day I asked David Baron how hard it would be to prevent pages from jumping around when stuff loads above your scroll position, and he gently encouraged me to tackle something easier as my first project.

Firefox 66 released

nilsmeyer — Wed, 20 Mar 2019 10:28:59 +0000

Really love the autoplay blocking, another defense against hostile webdesign.

Firefox 66 released

roc — Tue, 19 Mar 2019 23:27:40 +0000

http://www.erahm.org/2019/03/13/doubling-the-number-of-co...

> Even on our worst-case-scenario stress test — AWSY which loads 100 pages in 30 tabs, repeated 3 times — we only saw a 6% increase in memory usage when turning on 8 content processes when compared to when we started the project.

Firefox 66 released

karkhaz — Tue, 19 Mar 2019 22:30:50 +0000

> Extensions now store their settings in a Firefox database, rather than individual JSON files, making every site you visit faster

*quietly sobs into a pint*

I keep the settings for some of my extensions under version control, and I really enjoyed being able to create a symlink from the firefox profile directory to my repo.

Firefox 66 released

atai — Tue, 19 Mar 2019 22:07:25 +0000

4 to 8: that can increase memory use ...

Firefox 66 released

MatejLach — Tue, 19 Mar 2019 20:47:03 +0000

I'd imagine because less tabs rely on one process, so when there's more processes, there's less tabs per one that could crash.

Firefox 66 released

mathstuf — Tue, 19 Mar 2019 19:10:48 +0000

> Improved performance and reduced crash rates by doubling web content loading processes from 4 to 8

Interesting to read that increasing the number of threads reduced crash rates :) .

Firefox 66 released

yodermk — Tue, 19 Mar 2019 18:38:10 +0000

Wow this looks like one of the most impactful new releases in quite some time! Long list of useful improvements there. Most releases, there's one or two things that make me go "ok, that's cool I guess."

Firefox 66 released

josh — Tue, 19 Mar 2019 18:17:23 +0000

"smoother scrolling" doesn't quite describe the new feature here. Firefox now avoids having the page content change position after you've scrolled down and newly loaded content appears above the viewport.