challenge-bypass-extension VS user.js

I'd be fine if "ID for the web" was implemented with privacypass https://privacypass.github.io/

https://privacypass.github.io/ should help with Cloudflare verification. Works on Chrome and FireFox.

Cloudflare's Privacy Pass may help here: https://privacypass.github.io/

It should significantly reduce the amount of CAPTCHAs you see in a way that's not terrible for privacy.

For Safari, you can enable Private Access Tokens: https://blog.cloudflare.com/how-to-enable-private-access-tok...

Both of these mechanisms are similar to Google's web DRM proposal in that they rely on external issuers to generate tokens, but unlike Google's attempt they don't guarantee that ad blockers are disabled on pages that try to use tokens.

The author is referring to this standard: https://privacypass.github.io/

Apple uses it for its iCloud Private Relay service. The blind token is used so that Cloudflare can verify that a given device pays for iCloud Private Relay without revealing their identity.

Attestation is when such a blind token is proving the integrity of the software running on the device, not proving arbitrary properties. Privacy Pass could actually enable a fast, semi-decentralized system of anonymizing proxies.

If Apple exposed the “is System Integrity Protection enabled” bit to the web, then that amounts to attestation to me, and yes: Apple can do it whenever it wants, and people want Apple to do it.

Use Privacy Pass then if you don't want to use Chrome. https://privacypass.github.io/

Most hCaptcha and many Cloudflare -> https://privacypass.github.io/

That's weird, I haven't used it recently but will take a look. Looks like you're not the only one having issues though: https://github.com/privacypass/challenge-bypass-extension/issues/389

This wouldn't be at the network level, but there is this amazing extension at the browser level: https://privacypass.github.io/

Re: firefox and privacy, if you want to use firefox for privacy, consider using https://github.com/arkenfox/user.js . There is a case to be made that Firefox (with arkenfox's user.js) is one of the best privacy-respecting but still fairly usable browsers.

For extensions, I recommend people follow the recommendations[1] in the arkenfox repo and either harden their firefox or use librewolf. Umatrix is unmaintained since 2019.

[1] https://github.com/arkenfox/user.js/wiki/4.1-Extensions

For macOS : Thunderbird and you can harden it even more with this : https://github.com/arkenfox/user.js

only arkenfox

This article is shit. https://github.com/arkenfox/user.js/ is what you want.

If you make time to dig through settings and change them away from their official use (99% of users don't), then you should use a customized setup (in this case, a user.js). That way, you're good to go no matter what Firefox fork you use.

> Firefox remains a stable option to come back to everytime

Don't get me wrong, I've been using Firefox for the last decade and I don't intend on using anything else for the foreseeable future, but Mozilla has no idea what they're doing with Firefox nowadays. Firefox View is the most useless thing I've ever seen, that expiring "independent voices" theme picker was some weird hippie stunt[1], the latest UI redesign which split the tab from the window looks hideous, and it's not like Firefox doesn't have things you can tweak for a more private experience[2]. I miss Firefox Test Pilot where they tried out different new features, I found a lot of them to be very useful but sadly lots of them didn't make it.

[1] https://blog.mozilla.org/en/products/firefox/firefox-news/in...

[2] https://github.com/arkenfox/user.js/

Like others have said you can customize the browser to the point that it doesn't even look like the default anymore. Or customize it to maximize privacy.