[deanc]

I really wish Mozilla would focus relentlessly on a privacy-first, performant browser across major platforms. Nothing else. I don’t want extensions (attack vector), vpns, fancy bookmarking services that are deprecated later on etc. I want to browse the web safely and privately and preserve battery life - nothing more.

[GuB-42]

I wouldn't want a browser without extensions. Ad blocking in particular.

To me, ad blocking belongs in extensions. The job of a web browser is to show web pages as intended according to the standards. It includes all the ads, tracking, etc... the page has put in. If you want to block stuff or deviate from the standards in any way, that's what extensions are for.

And extension like ad blocking are an arms race, websites will deploy countermeasures to make them less effective and to which extensions can respond. Again I dont want the core browser to participate in an arms race. Keeping it free of vulnerabilities is already hard enough not to fight against standard behavior.

[ocdtrekkie]

Extensions are the primary threat to your security today. Nothing else comes close. Organizations are not basically competent if they are not restricting or blocking extensions, and you should not have more than one to three very trusted extensions in your browser. I'd argue the case for eliminating them in favor of in house code is significant.

As a reminder: Extensions execute with post-decryption access to the websites you view, and they update to new code silently and without asking for permission. HTTPS might as well not bother existing if you have extensions you do not have incredible trust in.

[GuB-42]

I would argue that building in extension-like features inside the browser is worse. In both cases, that's extra code, with security implications, but in case of extensions, you can choose not to have it.

Now, that's a question of whether you trust those who write the browser more than those who write the extension.

And by the way, the argument you have is the same that justifies the much hated "manifestV3", which makes extensions less powerful for security reasons. But it also limits the blocking capabilities of browsers to a simple, less effective blacklist. That Firefox still supports the old "insecure" way is a big selling point over Chrome.

[ocdtrekkie]

We obviously know Chrome team is not doing things for security reasons, they are doing things for ad revenue reasons. But it's also true that blocking ads requires an insane amount of trust: The uBlock Origin author can choose to read your bank account numbers and passwords. (Although he is high profile enough this would be caught quite quickly.)

Arguably the problem is that Manifest V3 proposed removing an ad blocking capability without replacement, whereas I would argue just as popup blocking was a couple decades ago, it belongs as a first class browser feature, not outsourcing extremely sensitive capabilities to random outside parties. Browsers should not be operated by (or funded by.........) ad networks, and should built high quality, secure tools to filter unwanted content from their users.

[account42]

Websites themselves are a much larger threat than extensions - should your ideal browser remove support for them as well?

[ocdtrekkie]

This is incredibly untrue. Many extensions can see and modify everything you see on any other site. Installing a browser extension is best described as installing a rootkit in your browser.

[account42]

If you look at actual negative consequences to users from extensions and websites I'm pretty sure the latter will win by a long shot. And you need extensions to protect yourself from malicious websites.

And of course extensions get access to websites, just like the browser. That's what "extension" means. As much as Google, Mozilla, Microsoft and Apple want you to believe otherwise they are not the only ones that can be trusted with that access.

[hoppyhoppy2]

If I couldn't use the ublock origin extension with Firefox, I'd leave for another browser. I consider it essential for privacy reasons as well as for adblocking, and I can't imagine it hurts battery life compared to all the ads and other crap it blocks.

Firefox's VPN service also has its privacy-related uses (yes, I'm aware of the limitations), but I think it mostly serves as a possible source of non-google revenue for Mozilla.

[drewfax]

Extensions were why Firefox was so popular among those considered 'abnormal.' Chrome just copied the idea. VPNs, Pocket, and sync services are all great features; it's their implementation and execution that is so poor.

All Mozilla (and Firefox) needs is to be run by developers, not the fucking MBAs.

[strix_varius]

100%. Browsers are considered a commodity but I'd happily pay for a browser that:

1. Could do all the stuff chrome does as well as chrome. (Eg, canvas rendering speed etc). So I can actually use web apps.

2. Just doesn't ever have anti privacy code, pro ad code, etc in it.

I use brave and a self managed lan which is just an ad hoc half assed attempt to reach the above goals. Because there is no other option.

[paradox460]

Sounds like Orion from kagi

[arxari]

We can't see Kagi's code though

[heresie-dabord]

> focus relentlessly on a privacy-first, performant browser across major platforms. Nothing else. [...] to browse the web safely and privately and preserve battery life - nothing more.

"Nothing more," you say.

The chief focus should be Privacy... Privacy and Performance... Our two chief focuses should be Privacy and Performance... and Cross-Platform Executables with Functional Parity... Our three chief focuses should be Privacy, Performance, Cross-Platform Executables with Functional Parity, and Safety on the Web... Our four chief focuses should be Privacy, Performance, Cross-Platform Executables with Functional Parity, Safety on the Web, and ruthless Efficiency in Preserving Battery Life... Our five... no... Amongst our chief focuses... Amongst our non-trivial chief focuses that users think are easy... are such elements as Privacy, Safety on the Web, Cross-Platform Executables with Functional Parity... I'll come in again.

Software Engineering Apologies to...

[0] _ https://en.wikipedia.org/wiki/The_Spanish_Inquisition_(Monty...

[driverdan]

> I don’t want extensions (attack vector)

How do you block ads and invasive trackers? DNS only?

[MatejKafka]

How do you expect Mozilla to make enough money from just Firefox to survive if Google ever decides to stop paying them for being the default search engine?

[ricardobeat]

> make enough money from just Firefox

According to 2025 filings, 86%+ of revenue came from the Google deal.

Google pays Mozilla because of the browser. How would shifting focus to the browser make that worse?

[account42]

Seeing as google keeps paying them more and more even as they shift away from improving the browser, you have to reevaluate what they are really being paid for.

[deanc]

Charge me. I’ll pay. I’m not going to donate to the org right now as I don’t use Firefox as it uses (noticeably) too much battery on my MacBook compared to safari and chrome.

[yjftsjthsd-h]

Notably, also, it's not currently possible to donate to Firefox; you can only give Mozilla money to use on unrelated projects. As a Firefox user, the inability to pay for the thing I actually want is grating.

[account42]

How do you expect the red cross to survive if they can't monetize the people they are helping?

[Telaneo]

Firefox is little more than a uBlock Origin runtime for me, so extensions are pretty critical for me.