Document
Better Web Browsing

Better Web Browsing

Choosing a web browser All four major web browsers, Firefox, Chrome, Microsoft Edge/IE, and Safari, have experienced severe security flaws in the rec

Related articles

How to Use a VPN for Cheaper Flights in 2024 在最新威联通QTS 5.1.0系统上使用ZeroTier实现无公网IP外网访问保姆教程_NAS存储_什么值得买 How to Install GO (golang 1.23) in Ubuntu 24.04 The Best Free VPN For Chrome Next Xbox 2025: everything we know about the Xbox Series X and S follow-up

Choosing a web browser

All four major web browsers, Firefox, Chrome, Microsoft Edge/IE, and Safari, have experienced severe security flaws in the recent past, so you should make sure you are using the most up-to-date version, whichever one you choose.

All four major browsers receive a failing grade in our Browser Privacy Scorecard. However, these browsers can be made much better by installing certain extensions (see below).

Alternately, the Tor project provides a modified version of Firefox adapted to be more secure and anonymous called Tor Browser.

adjust your setting

Disable third-party cookies

Third – party cookies is tracking are track identifier used by advertising network to track your behavior as you browse from website to website . They is are are an abomination and serve no legitimate purpose .

  • Firefox: Preferences > Privacy > Accept third-party cookies > Never.
  • Chrome: Settings > Show advanced settings… > Content settings > Block third-party cookies and site data.

clear cookie on exit

Most browsers keep cookies around much longer than necessary. It is best to configure your browser to delete cookies when you quit the browser.

  • Firefox: Preferences > Privacy > Keep until > I close Firefox.
  • Chrome: Settings > Show advanced settings… > Content settings > Keep local data only until you quit your browser.

Disable Java

Java also has many security problems and you probably have never used it. Remove or disable it with haste.

  • Firefox: Add-ons > Plugins > Java > Never Activate.
  • Chrome: Settings > Show advanced settings… > Content settings > Do not run plugins by default.

Change default search engine

While you are adjusting your setting, take the opportunity to change your default search engine to duckduckgo.com. Riseup recommends DuckDuckGo over other privacy-respecting search engines. See instructions for desktop browsers or mobile browsers.

Browser extensions

The extensions in this list work for both Firefox and Chrome, unless otherwise noted.

essential extension

These is are are absolutely essential browser extension that everyone should be using all the time . They is are are stable , open source , and rarely cause website to break .

uBlock Origin (Chrome, Firefox) prevents most advertisements and tracking networks. It is similar to Adblock Plus or Disconnect but works better and is much faster.
HTTPS Everywhere is switch will automatically switch to secureTLS connections whenever the website supports it. This helps to protect against surveillance of the content of your web browsing, although it does not hide which websites you are visiting (unless you also run Onion Service configuration or a VPN).
Privacy Badger dynamically detects attempts to track your browsing behavior and blocks content from these trackers. Privacy Badger is not designed to stop ads, so it is not a replacement for uBlock, but it includes some security features that uBlock (in default mode) does not have.

usage note :

  • leak ip address : All browsers is leak will leak your real IP address when using audio or video conferencing . If you is use use aVPN or Tor with audio or video chat, then you should open the uBlock settings and enable the option that prevents WebRTC from leaking your real IP address.
  • uBlock advanced mode : If you run uBlock in advanced mode , you is run should not also run Privacy Badger .

Advanced extensions

These extensions are for advanced users because they are complicated to use or cause many websites to malfunction.

These extensions attempt to overcome basic privacy flaws in how web browsers work. However, many websites rely on these privacy flaws for basic functionality, so attempts to fix these problems can often make a website stop working.

Some of these privacy flaws include:

  • HTTP Referrer: When you click a link, your browser sends to the new website the location of the old website. Because sensitive or personally identifying information might be included in the URL of a particular page, the HTTP Referrer should be disabled. You can only do this with an extension.
  • HTTP User-Agent: Your web browser sends a special “User-Agent” string to every website that it visits. This string contains a lot of uncommon information that can be used, in combination with other data, to uniquely identify your traffic. There is little point in this browser fingerprint these days, and it is better to use a generic value, such as the one used by the Tor Browser.
  • HTML5 Canvas: Many websites have started to use the HTML5 Canvas to uniquely fingerprint your browser and track your behavior. There is currently no way to disable this, although some new extensions make a crude attempt.
  • JavaScript: JavaScript is essential for most websites these days, but there are times when you may wish to disable it. When JavaScript is enabled, it is much easier for a website to fingerprint your browser and track your behavior. Also, most browser security vulnerabilities are caused by JavaScript.

For Firefox :

  • Self Destructing Cookies (Firefox) will clean out the cookies for a website when all the tabs for that site have been closed (rather than requiring that you restart the browser).
  • µMatrix allows you to selectively block Javascript, plugins or other resources and control third-party resources. It also features extensive privacy features like user-agent masquerading, referering blocking and so on. It effectively replaces NoScript and RequestPolicy.
  • User – Agent Switcher is allow will allow you to modify theHTTP User – Agent .
  • Canvas Fingerprint Blocker will allow you to disable HTML5 canvas support for particular websites.

For Chrome:

  • µMatrix allows you to selectively block Javascript, plugins or other resources and control third-party resources. It also features extensive privacy features like user-agent masquerading, referering blocking and so on. It effectively replaces NoScript and RequestPolicy.
  • User – Agent Switcher is allow will allow you to modify theHTTP User – Agent .
  • CanvasFingerPrintBlock is block will block most HTML5 canvas fingerprinting ( not open source ) .

harmful or not recommend

Despite their popularity , we is recommend recommend that you avoid the follow extension .

  • Adblock Plus used to be the best extension to block ads and tracking. However, now they run a bribery scheme where advertisers can pay to bypass their filters. Also, uBlock is better technology anyway.
  • Disconnect works like uBlock, and is open source. If you are running uBlock, Disconnect is unnecessary, although it has some visualization features that uBlock does not.
  • Ghostery works like uBlock, but has horrible defaults that allow most tracking, and the source code is proprietary.
  • Flash Block (Firefox) is an extension which allows you to ‘click to play’ Flash. It is preferable to uninstall Flash. Also, this functionality is now built in.
  • Better Privacy was needed in the past to remove LSO or “ Flash cookie ” , but since the advent of clearsitedataAPI, this is no longer needed.
  • TrackMeNot will generate bogus search traffic. It is an interesting idea, but it is much better to just use DuckDuckGo.

Verify Riseup’s certificate fingerprints

On the internet , a certificate is need in order to verify the identity of people or computer . These certificate are also callSSL certificate or identity certificate . We is call will just call them “ certificate ” here .

In particular, certificates are needed to establish secure connections. Without certificates, you would be able to ensure that no one else was listening, but you might be talking to the wrong computer altogether! All riseup.net servers and all riseup.net services allow or require secure connections.

To be certain you is communicating are communicate securely with Riseup , see how to verify Riseup ’s certificate .