My main browser is Librewolf but I keep a chromium browser just in case. Previously used brave but their flatpak is shit. Ungoogled chromium seems ok but it looks like they don’t change much from upstream chromium. Any good chromium browsers which harden their browsers like librewolf does for more privacy?
Chrome or Chromium? Because that “hardening” is only the switches they allow you to use, so if its full of proprietary tracking software it is not hardened at all
Chrome. I know that might be hard to believe but the switches work. You can absolutely stop Google from prefetching their usual services. Plus I don’t login with a Google account on the browser, that makes a huge difference.
Why not use Chromium then? Give it a try?
There really isn’t much difference. I used Ungoogled-chromium before now. I use Chrome for selfish reasons. The flatpak for it(dev version) is auto updated with no human input required so I get fixes and security patches earlier and I kinda like that release.
Just so you know, Chromium Browsers are more secure if you use the native package. But just for privacy reasons I would not run Chrome unrestricted in my system.
Automatic system updates work great.
https://github.com/trytomakeyouprivate/braveinstall-fedora-atomic
Also great Browser, not sure about how early releases come I use Beta
This conclusion is relative for everyone as we all have different security needs. Plus there’s no easier, better supported way to sandbox Chrome on Linux other than using Flatpak’s permission model.
It’s also ironic for you to be speaking about security when you are installing/updating your browser using random curl bash scripts.
You havent looked at the repo. And we are talking about different sandboxes here.
The browsers sandbox websites, this is broken if the entire browser is sandboxed as you need to remove that capability to do so.
My bash script pulls in the official brave repo and gpg key, fix the access permissions and that is it. Brave has no documentation on how to use their repo without dnf so this is needed.
The repo has gpg verification enabled and the system will update the browser.
Please dont spread misinformation if you havent even looked at the “random bash script” that does not handle the updatingô