Language Selection

English French German Italian Portuguese Spanish

Mozilla/Firefox: CRLite, Firefox 83 and TenFourFox

Filed under
Moz/FF
  • Querying CRLite for WebPKI Revocations • Insufficient.Coffee

    Firefox Nightly is now using CRLite to determine if websites’ certificates are revoked — e.g., if the Certificate Authority published that web browsers shouldn’t trust that website certificate. Telemetry shows that querying the local CRLite dataset is much faster than making a network connection for OCSP, which makes intuitive sense. It also avoids sending the website’s certificate information in cleartext over the network to check the revocation status: solving one of the remaining cleartext browsing data leakages in Firefox.

    Mozilla is currently publishing CRLite data to Remote Settings four times per day, keeping a very fresh set of revocation information for the public Web. I’ve provided some direct details on how to get at that data from the CRLite FAQ, and I want to introduce one of my command-line tools I’ve used to analyze and play with the dataset: moz_crlite_query. I’ll introduce crlite_status in a later post.

  • Firefox 83 Introduces HTTPS-Only Mode

    According to Mozilla, “the web contains millions of legacy HTTP links that point to insecure versions of websites. When you click on such a link, browsers traditionally connect to the website using the insecure HTTP protocol.”

    With HTTPS-Only Mode enabled, Firefox will attempt to establish HTTPS connections to every website and will ask for permission before connecting to a site that doesn’t support secure connections. Even if you click on an HTTP link or manually enter an HTTP address, Firefox will use HTTPS instead.

  • TenFourFox Development: TenFourFox FPR30b1 available

    TenFourFox Feature Parity Release 30 beta 1 is now available (downloads, hashes, release notes). I managed to make some good progress on backporting later improvements to the network and URL handling code, so there are no UI-facing features in this release, but the browser should use a bit less memory and run a little quicker especially on pages that reference a lot of resources (which, admittedly, is a lot of sites these days). There is also a minor update to the host database for basic adblock. Assuming all goes well, this release will come out parallel with Firefox 84 on or around December 15. I'll probably do an SPR-only build for the release immediately following to give myself a break; this will contain just needed security fixes, and there will most likely not be a beta.

More in Tux Machines

Movim: An Open-Source Decentralized Social Platform Based on XMPP Network

Just like some other XMPP desktop clients, Movim is a web-based XMPP front-end to let you utilize it as a federated social media. Since it relies on XMPP network, you can interact with other users utilizing XMPP clients such as Conversations (for Android) and Dino (for Desktop). In case you didn’t know, XMPP is an open-standard for messaging. So, Movim can act as your decentralized messaging app or a full-fledged social media platform giving you an all-in-one experience without relying on a centralized network. It offers many features that can appeal to a wide variety of users. Let me briefly highlight most of the important ones. Read more

Revive Classic Nintendo DS Games on Linux With Emulation

Want to play Nintendo DS games on your Linux system but can't figure out how? Back in the day, Nintendo DS was a very popular handheld console with a huge collection of games. But over time, advanced consoles were launched in the market that rendered DS obsolete. Luckily, several emulators are available that allow you to play classic Nintendo DS games on your system. DeSmuMe is a great example of a stable Nintendo DS emulator for a Linux machine. Read more

Patched Linux 5.11 Continues Looking Great For AMD Ryzen/EPYC Performance

While the initial AMD Linux 5.11 performance regression written about at the end of last year was of much concern given the performance hits to AMD Zen 2 / Zen 3 processors with the out-of-the-box "Schedutil" governor, with a pending patch the regression is not only addressed but in various workloads we continue seeing better performance than even compared to Linux 5.10. Here is the latest from several more days of extensive performance testing. Read more

DIN-rail gateway offers dual LAN and dual RS485

The Unipi Gate G110 and G100 are PLC-ready DIN-rail gateways that run Linux on a quad -A53 SoC with 16GB eMMC, GbE and 10/100 LAN ports, and up to 2x RS485 ports with modular extensions. Czech based Unipi, which started out in 2014 with a Raspberry Pi based UniPi automation controller board and followed up with products including an Allwinner H5-based Axon automation controller, has now launched the $243 Unipi Gate G100 and $272 Unipi Gate G110 DIN-rail gateways. Read more