[staticassertion]

I still trust Chrome's sandbox - I have less understanding of where Firefox does sandboxing, how it works across platforms, etc. Whereas I have a solid understanding of how Chrome uses seccomp on Linux.

While pieces of Firefox are moving to Rust the majority of attack surface is still in C++, so I want a strong sandbox if I'm going to run that browser.

[pcwalton]

> I have less understanding of where Firefox does sandboxing, how it works across platforms, etc. Whereas I have a solid understanding of how Chrome uses seccomp on Linux.

It's described in detail here:

* https://wiki.mozilla.org/Security/Sandbox

* http://www.morbo.org/2017/11/linux-sandboxing-improvements-i...