source

3 min read Original article ↗

Konform Browser Source Repository

This repository contains all the patches and theming that make up Konform Browser, as well as scripts and a Makefile to build it. There also is the Settings repository, which contains the browser preferences.

Konform Browser?

Konform Browser is a web browser with the goal of promoting user freedom and access to the rights of security, privacy and anonymity. It is intended as a general-purpose browser fit both for daily online browsing as well as targeted deployments in secure or untrusted environments. On a technical level it is fundamentally a patched build and custom configuration of Mozilla FireFox ESR originally starting as a fork of LibreWolf. The project has no affiliation with either Mozilla or the LibreWolf Community but pays gratitude and credit to both.

Downloading and Installing

See release notes for how to verify and install prebuilt releases from Codeberg Packages.

Konform Browser is also officially providing AUR packages for Arch Linux users. See the Arch repo for details.

For running Konform Browser in a Docker or Podman container, refer to the OCI repo.

Building Konform Browser

See BUILD.md.

Active repositories and projects

List of browser build sub projects per build targets.

Currently active build repositories:

  • source: Source tarballs and releases
  • bsys6: Compilation for binary packages; .deb/.rpm for Mint, Fedora, Ubuntu
  • OCI: Container image for Podman/Docker
  • Arch: Arch Linux package

Differences to LibreWolf

While the two projects have shared primary goals of privacy, security, and user freedom and Konform retains most of Librewolf's patches, Konform provides a different out-of-the-box experience compared to LibreWolf in name of the project goals. For example:

  • Based on Firefox ESR (Extended Support Release) instead of Latest
    • Less update churn and delayed access to newest features, while staying up to date with security fixes
  • Removed integrations with online services for improved privacy
    • "RemoteSettings" is completely disabled, also disabling features depending on it
      • Konform Browser will not download or sync updates of settings, preferences, search engines, or AI models at runtime
      • Full-page machine translations are disabled
      • All remote analytics and telemetry disabled
    • Disable OCSP validation
      • Upstream enforces OCSP validation by default, which means it will leak metadata to remote servers and not function in offline/airgapped environments
      • Konform Browser enables more modern CRLite instead
  • Assorted privacy-strengthening of defaults
    • Disable cross-origin referer by default
    • Enable letterboxing by default if ResistFingerPrinting is enabled
  • Extended configurability
    • New preference privacy.resistFingerprinting.allowTheming (default true)
      • Allows setting non-default theme when ResistFingerPrinting is enabled
      • Dynamic light/dark theme depending on system preferences
      • LibreWolf requires disabling ResistFingerPrinting for dark mode
    • User-configurable FireFox Sync endpoints
      • For using self-hosted or third-party Sync and Accounts servers
    • User-configurable HTTP Referer spoofing
  • Reskinned logo and privacy-purple color scheme
  • ...etc

Bundled extensions

Librewolf will download uBlock Origin from Mozilla Addons on default profile initialization.

Konform Browser does not download any extension by default. Instead, it will attempt to auto-detect and enable the following (recommended) extensions if already installed on the system by the user on a recognized path:

This can be customized without rebuilding the browser by editing /usr/lib/konform/distribution/policies.json (https://codeberg.org/konform-browser/settings) to preload your own extensions or disable any of the defaults.

FAQ

Other platforms

Android?

Hopefully one day! Contribitions towards this are warmly welcome.

BSD? musl? My favorite Linux package manager?

Suggestions and contributions appreciated

macOS or Windows?

Currently the thinking is that supporting these targets at the expense of others would not align with project goals.