There is a new Firefox fork in town: Konform Browser. Its focus is privacy, security and user freedom. Yes, I know this sounds familiar - but hear me out, I do think we have something to bring to the table!

The project started as a fork of LibreWolf and now stands on its own four feet.

Some highlights to give an idea to those familiar with LibreWolf or other FF fork:

  • Security: Konform is based on Firefox ESR. This means a more stable base without missing out on the latest security updates, in exchange for longer time waiting for the newest features from Firefox. It also enables shorter lead times to backport upstream updates.
    • In this sense (and a few others), Konform Browser is closer to IceCat/GNUZilla than it is to Librewolf.
  • Freedom: Konform allows a higher level of customization. It gives the user control and trusts you with that responsibility. Some examples:
    • Allows enabling dark mode and following system theming even when Resist Fingerprinting is enabled.
    • Allows installing your own self-built unsigned add-ons
    • "Spoof referer source" user configuration option
  • Privacy and security: Disables all browser features relying on external network connections.
    • "RemoteSettings" is completely disabled^1^.
    • No cloud "AI" integrations. You can run Konform on a disconnected network and not notice any reduced functionality.
    • All telemetry, metrics, and ads from the browser disabled.
    • OCSP turned off (but we have CRLite).
    • tcpdump and see the difference

I should add that even if we contrast with LibreWolf above, this is not at all meant as a dig or criticism. That we chose it as base and that it's the easiest to compare with is a testament both to how closely aligned we are and that Konform has a lot to thank Librewolf and the wider Firefox customization community for. Like they built from Librefox and Arkenfox to bring private browsing to a wider audience, so are we but the next to try help widen and deepen the browser ecosystem.

The recommended installation method is building from source but there are also binary packages for x86_64 and arm64 built by Codeberg CI. Currently Linux only, considering Android next and could use some assistance with that.

Doors open for users, testers and contributors. Looking forward to hear what you think and if there's anything missing.

^1^: This means that local full-page translation is also unavailable even if in principle it should be possible to bundle and run translations fully locally. It's just the way Mozilla built it. Patches towards allowing users to enable fully offline translations would be very welcome.


Sources: https://codeberg.org/konform-browser

Arch User Repo package

Deb / RPM / Tarball

See releases for details.

Screenshot

all 13 comments

sorted by: hot top controversial new old
[–] 25 points 9 months ago

Having more options is always good.

  • source
  • [–] 12 points 9 months ago (2 children)

    The name is not a wordplay with some form of lupine or canine animal, then no deal.

    Jokes aside, taking note of it. 👀

  • source
  • hideshow 2 child comments
  • [–] 6 points 9 months ago (3 children)

    Allows enabling dark mode and following system theming even when Resist Fingerprinting is enabled.

    So, basically defeating the point of RFP?

  • source
  • hideshow 3 child comments
  • [–] [S] 15 points 9 months ago* (last edited 9 months ago)

    There is a longer discussion to be had about both what RFP does, how effective it is, and the relative impact on entropy of this particular feature.

    For now I will just say that this: Providing configuration for this serves the projects goal of user control and freedom. It should be up to the user to make that call. Us as developer shouldn't unilaterally decide on behalf of everyone. We can't think of everything and we don't always know best. Of course we can still provide guidance and put what we believe is sensible as defaults. I find it odd to criticize empowering users in this way, in particular considering the status quo.

    Were it up to me, everyone should have Letterboxing on by default, probably with similar reasoning. I don't see why you wouldn't use it. Everyone enabling it would make us all (ever so little) less fingerprintable. Arguably more meaningful impact than dark/light-theme. And less of an accessibility issue. Even so, we still leave this configurable in the same way as the dynamic theming.

    You can also see this way of thinking reflected in allowing loading of your own add-ons from file and allowing userChrome customization. Probably niche power-user features with risks involved and sharp edges exposed but we are developers and maintainers of software, not your sysadmins^1^ or caretakers^2^.

    If you fundamentally disagree, well, not all software has to be for everyone. Probably there is already something else (like Tor Browser) that serves your needs and aligns with your philosophy better?

    ^1^: ...xcept... you want us to be your sysadmin? 👉👈 Call me when you close that seed round bb 😘

    ^2^: Nope.

  • source
  • parent
  • [–] 3 points 9 months ago (1 child)

    are you planning to push it to nixpkgs as well so that Nix/NixOS users can acquire it? :)

    I’d like to try it

  • source
  • hideshow 1 child comment
  • [–] [S] 8 points 9 months ago* (last edited 9 months ago)

    I'm so glad you want to try!

    The problem with both that and Flathub is that I can't seem to pass Githubs signup CAPTCHA whatever I tried (and yes I tried other browsers too lol). Besides, having my old account there arbitrarily blocked on phone number verification in the past, not feeling super keen on having users rely on them for updates, even putting aside whatever I feel about Microsofts and GitHubs role in the ecosystem in general...

    However, if anyone would be up for the literal push-part of pushing it up and wouldn't mind collaborating a bit in the process, would be happy to make that happen together (or use your privilege if you're motivated; it's free software yo, just heed the license ;)). There is an Issue thread for coordinating if this is you.

    I don't think it should be too involved as the source repo and source tarballs are built in pretty much the same way as LW, which already has a derivation in nixpkgs. Didn't look closer at that derivation but hopefully shouldn't be much more than copying pkgs/applications/networking/browsers/librewolf and replacing some strings.

  • source
  • parent
  • [–] 2 points 9 months ago (2 children)

    Can I ask why you decided to fork Librewolf?

    An AppImage or Flatpak would be great for us atomic users. Maybe you are considering that in the future.

  • source
  • hideshow 2 child comments
  • [–] [S] 2 points 9 months ago* (last edited 9 months ago) (1 child)

    Can I ask why you decided to fork Librewolf?

    I wrote a bit of the "why"s already in the OP. Could expand further for you but what do you have in mind? "Why did you choose librewolf as upstream", "why fork and not another approach", "why bother with any of this at all", ...?

    Flatpak

    Flatpak is something we want and have been looking at already. See here for what's holding that back. There is already an (untested) repo for it.

    Appimage.

    While AppImages can be very convenient, we are ambivalent on some their security aspects among other things. Currently not prioritizing it until we have what we consider generally more solid options covered but will consider outside contributions if anyone feels motivated and puts in the effort to makes it happen.

    Issue thread for new distribution targets where interested Codeberg users can follow up: https://codeberg.org/konform-browser/source/issues/9

    for us atomic users

    I see why users prefer flatpaks or appimages but just for consideration some ways I can think of one could run it on an atomic distro today:

    • toolbx style running the browser in a rootless podman container ^1^
      • Haven't tried straight up installing it in an actual toolbox container so not sure how well that works but maybe it's worth a try if that's something you already use?
    • For the Fedora family, should be straightforward to install an .rpm in your overlay
    • Run the app from the binary tarball directly on the host, installing it on a user mount somewhere ^2^
    • Use the source, Luke. Build it. ^3^

    ^1^: Would anyone actually use it if there was a Containerfile for it? We currently don't have a public one but I can attest this works fine in general and if people indicate interest for it I think it's a neat idea that Konform Browser could provide that as an option.

    ^2^: I think this is fine for testing and short-lived installations but unless you are technical enough to reason about the trust involved and automate for verified updates (or at least getting notifications for them), I wouldn't recommend it for long-term (>= months) installations so that you don't get stuck on unpatched versions without thinking about it. This is the least secure way to run it. Not generally recommended for non-technical users.

    ^3^: Something I recommend becoming more familiar with in general if one has the time, resources, and patience. The catch with updates applies here too if this is for production use.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 3 points 9 months ago* (last edited 9 months ago)

    Update: There is now a Containerfile producing images using the prebuilt .deb if anyone wants to try the container-based approach to run Konform Browser in podman or docker or whatever. Some basic testing done using rootless podman under either Wayland and X11 on Kinoite and both ran fine.

    https://codeberg.org/konform-browser/oci

    If you want it to have the dark theming activate depending on your desktop theme it should work by adding -v ${HOME}/.config/gtk-3.0:/home/user/.config/gtk-3.0:ro,z. Or -v ${HOME}/.local/share/konform-browser-1:/home/user:Z for an isolated persistent homedir (similar to Tor Browser).

  • source
  • parent
  • 29 comments in c/linux@lemmy.world view that post
    [–] 29 points 9 months ago

    I am very happy with Librewolf and it has been my goto broswer for the past 2 years or more, but it's great to see alternatives showing up now and then. 

    Can't wait to see what Ladybird and Servo browsers do. That will be truly spectacular when it happens.

  • source
  • [+] 7 points 9 months ago (4 children)
  • [–] [S] 0 points 9 months ago (3 children)

    are you in the wrong sub, sir?

  • source
  • parent
  • hideshow 3 child comments
  • [+] 4 points 9 months ago (3 children)
  • [–] [S] 4 points 9 months ago* (last edited 9 months ago) (2 children)

    I mean technically Android is still somehow Linux so ^^. But it does feel funny when the first (and only?) follow-up comment on the Linux community of this Linux software is about needing an Android version instead :p

    The more interested people we have checking it out and poking at the code, the higher chance we can ship Android builds Soon^tm^. Feel free to swing by and stay tuned ;)

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 9 months ago (1 child)

    Sorry, but there's already a librewolf replacement for android: IronFox

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 7 points 9 months ago* (last edited 9 months ago)

    IronFox: Exists. Currently mostly due to hard thankless work of one or two individuals.

    somerandomperson: OK they got this; everyone else stop trying and go home now

    I don't think dismissing the issue so quickly is fair to either the IronFox maintainer, the state of Android web security, or browser diversity. It is also discouraging for anyone else considering exploring this and sharing their work in public. We need more people working on an open and free mobile browser ecosystem, not less.

  • source
  • parent
  • load more comments (-1 replies)
  • [–] 3 points 9 months ago (10 children)

    Super, does it have an overrides configuration file like Librewolf does?

  • source
  • hideshow 10 child comments
  • [–] [S] 2 points 9 months ago* (last edited 9 months ago) (9 children)

    Yes! In fact while the browser otherwise has its own branding, it does recognize override config as librewolf.overrides.cfg so you can literally just drop your existing LibreWolf overrides file into ~/.konform and it should pick it up. Figured this would make it smoother for people migrating from LW or switching between the two.

  • source
  • parent
  • hideshow 9 child comments
  • [–] 2 points 9 months ago (8 children)

    Thanks, I will remove the preferences in my configuration that Konform enables by default. By reading the differences between the both browsers I can already tell it has saner defaults than Librewolf.

  • source
  • parent
  • hideshow 8 child comments
  • [–] [S] 2 points 9 months ago* (7 children)

    Nice, I hope it lives up to expectations!

    Oh and one more thing on the overrides: There are a couple of prefs flags that exist in one of Konform/LibreWolf but not the other mostly due to being based on different FF versions - so in case you have some particular override not being effective, I'd first check that it's not just a case of differences between FF versions 140-147. Not expecting that to come up in practice and setting non-recognized prefs should be harmless, but knowing this might save some head scratching in case you have an extensive overrides config with recent additions.

    Looking forward to any feedback you may have <3

  • source
  • parent
  • hideshow 7 child comments
  • [–] 1 point 9 months ago (6 children)

    I tried to install both konform-browser and konform-browser-bin in Arch with yay and it failed to import gpg keys:

    gpg: error reading key: No public key
    
    
     :: PGP keys need importing:
     -> 9511FD9BD64CCF171F0B28A72B6FD58B41A0E262, required by: konform-browser-bin
    :: Import? [Y/n] y
    :: Importing keys with gpg...
    gpg: keyserver receive failed: No data
     -> problem importing keys
    

    I would build from source but I really have an underpowered laptop. Anyway, when this gets fixed I will be sure to give some feedback.

    :)

  • source
  • parent
  • hideshow 6 child comments
  • [–] [S] 2 points 9 months ago* (last edited 9 months ago) (5 children)

    Thanks for checking in! Did you try importing the Release PGP Key listed under the release already? ^^ Maybe it's a bit easy to overlook in the release notes but it's right above the debian installation. There should be a pinned comment on that on the AUR package pages already.

    If you save key to file on disk:

    $ gpg --import ./konform-cb-ci.pgp
    

    Then it should show up with that Key fingerprint when doing gpg -k after.

    Please let me know still having issues

  • source
  • parent
  • hideshow 5 child comments
  • [–] [S] 1 point 9 months ago* (last edited 9 months ago) (4 children)

    Oh and I forgot to mention, we have an Arch repo now with prebuilt bin package too. If you add the repo and pacman -Sy konform-browser-bin, then it will upgrade for you on future pacman -Syu when there are new versions published.

    For trying out such a new project I guess you might still want to do the more manual route in the beginning but if/when you feel it's earned your trust now you know <3

  • source
  • parent
  • hideshow 4 child comments
  • [–] 1 point 9 months ago* (3 children)

    I just installed it from the AUR after importing the keys manually(before it did not work). Everything works as expected on first impression. I will port my configuration (like enlarging those skinny ass scrollbars) and will give you my feedback about it.

  • source
  • parent
  • hideshow 3 child comments
  • [–] [S] 1 point 9 months ago* (last edited 9 months ago) (2 children)

    You know, I think we should do at least something about those scrollbars^1^ too. Not sure how close this is to what you prefer but hopefully a more sane default with more traditional fixed-width scrollbars should be part of next release. In general aiming to keep subjective and aesthetic UI tweaking to a minimum but I think the usability argument supports this one at least until anyone voices a different opinion.

    So ty for that suggestion and also thank you for the warm feedback you left on the repo! :3

    ^1^: Not only are they thin; they change the width dynamically when hovered and overlay on top of content. The potential for misclicks is not great.

  • source
  • parent
  • hideshow 2 child comments
  • [–] 2 points 9 months ago (1 child)

    Good idea, I have the following in my preferences that I took from Dedoimedo:

    defaultPref("widget.non-native-theme.enabled", true);
    defaultPref("widget.non-native-theme.scrollbar.size.override", 20);
    

    And the option "Always show scrollbars" enabled because I have not found the preference to do it through the configuration file.

    I also shared it on mastodon and an ex Firefox subreddit moderator shared with me their enterprise policies for Firefox which included those options. Its fair to say that these are objectively good options.

    The changes that you proposed in the scrollbar branch seems good to me, specially the disabling of the overlay of the bar.

    Cheers!

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 2 points 9 months ago* (last edited 9 months ago)

    Appreciate the links!

    And the option "Always show scrollbars" enabled because I have not found the preference to do it through the configuration file.

    The labeling makes it less obvious but that maps to widget.gtk.overlay-scrollbars.enabled=false so also part of Konform upcoming update :) In general I find the quickest way to identify the mapping of a UI configuration and the about:config key is to:

    • launch a clean profile
    • open about:config
    • click Show only modified preferences
    • open about:preferences
    • change the thing
    • tab back. what's new

    BTW, widget.non-native-theme.enabled is a no-op since the direct GTK integration was removed a while back: https://bugzilla.mozilla.org/show_bug.cgi?id=1726283#c4

  • source
  • parent
  • [–] [S] 2 points 9 months ago* (last edited 9 months ago)

    Someone asked me about donations. There is no way to directly fund the project today (TBD) but if you have cash to spare then:

    • Codeberg e.V. providing supportive and enabling infra and a point of collaboration for growing part of FLOSS ecosystem. This isn't free.
    • EFF hopefully doesn't need an intro here
    • noyb.eu
    • Tor Project
    • The maintainer of some other FLOSS software you care about
  • source
  • [–] 1 point 8 months ago (1 child)

    Can I have it provide the correct timezone to websites?

  • source
  • hideshow 1 child comment
  • [–] 1 point 9 months ago (2 children)

    Oooh. Big fan of LibreWolf. Shall have to check this out...

    Aw. On Artix, it wants to pull in wayland. No thanks.

    Aw. https://gpo.zugaina.org/Search?search=konform no ebuilds on any listed overlays for Gentoo yet.

    I'll try remember to keep an eye out for it in any of the repos available to me.

  • source
  • hideshow 2 child comments
  • [–] [S] 1 point 9 months ago* (last edited 9 months ago) (1 child)

    Dev here! Thanks for your interest!

    Aw. On Artix, it wants to pull in wayland. No thanks.

    Hm, I guess you're just running text mode browser on that machine..? On Arch the wayland package is pulled in as transitive dependency of the gtk3 package. I don't believe it will actually be loaded at runtime. However, I think that gtk3 might not be a hard dependency at all anymore (it used to be for Firefox in the past so this might be a leftover that konform inherited).

    If you're comfortable with makepkg I could suggest trying the konform-browser-bin AUR package and simply remove gtk3 as dependency from the PKGBUILD, run makepkg -si and fingers crossed that might work. More details in konform-browser/Arch repo, where contributions are also welcome. If you go the source route, see the note about profiling without wayland.

    EDIT: OK I took a look and unless Artix is repackaging some core packages, I don't see a way to make it work on Arch at least: xorg-server depends on libglvnd depends on mesa depends on wayland. Among others. Are you actually able to run an X server at all without having the wayland package installed? Or is thsi for headless use without any graphical environment...? Curious about the use-case! You can also try the binary tarball or just tar -xfing the arch package and invoke the konform binary directly.

    Aw. https://gpo.zugaina.org/Search?search=konform no ebuilds on any listed overlays for Gentoo yet.

    FWIW, it's not planned at the moment but here's the issue currently tracking Gentoo packaging: https://codeberg.org/konform-browser/source/issues/9

  • source
  • parent
  • hideshow 1 child comment
  • [–] 1 point 9 months ago*

    Thanks for that reply.

    And...

    Thanks for the update edit.

    I'm on bedrock linux, already got my X server from other distro strata.

    Spent (more than) a couple hours wrestling my artix today, and it seems to have other issues (that I have ideas how to remedy tmro after sleep), that had been further preventing me from trying Konform, failing on gpg. Shall see how it goes in the morning.

    ... packaged for void linux would be cool too. ;)

  • source
  • parent
  • [+] -19 points 9 months ago (2 children)

    Have you heard of TOR

    I prefer Brave

  • source
  • hideshow 2 child comments
  • [–] 15 points 9 months ago (1 child)

    How have you missed the huge amount of posts, articles, videos etc. all over the web about why you shouldn't use brave? Seriously, I've never used it and see that all the time.

  • source
  • parent
  • hideshow 1 child comment
  • [–] [S] 0 points 9 months ago* (last edited 9 months ago)

    Not personally daily-driving or actively recommending it but I've had to look closely at Brave as part of browser security work.

    Most of the posts, articles and videos I've seen that don't apply approximately equally to the other big names are mostly backed by arguments like "I don't approve of BE behavior and BE made Brave therefore Brave bad", "crypto scammers bad therefore crypto bad and Brave uses crypto therefore Brave bad" or "it's being promoted by bad people and therefore bad". I think such arguments are in themselves without merit, should be dismissed and are not sufficient to tell others they shouldn't use it. Tribalism isn't healthy. An opinion being widely shared doesn't make it true. Your trusted influencer being upset doesn't mean you need to be.

    Valid criticisms of Brave and valid reasons for not using the browser exist but that's rare to see written out but buried deep under the bulk of FUD, groupthink and uninformed meme-takes we find all over the stuff shared on socials. On the privacy and security sides it's very much a mixed bag. Scrolling through Brave flags I note more than one thing I think we can take inspiration from. For people locked into corpware and limited to what's on the major app stores, you can certainly do worse. Yet I see little concern-blogging over Copilot 365 .NET Live Edge or Samsung Internet Browser, for example.

    Of course I'd personally love if you used Konform Browser (or any other non-chromium browser) instead but I mostly see people bashing Brave for completely confused reasons. Yes there's bloat and ads and telemetry and problematic trust and outbound networking going on out of the box. Yes they inject their own monetization into the user experience if you blindly click "Next, Next, I agree, Next" and run with defaults. All just like for Firefox these days. And just like Firefox, user configuration exists to improve on much of that while the software license and open source code afford fixing the rest for the willing. The differences I've seen when it comes to the browsers are mostly in degrees, not fundamental. Maybe we should have a Brave fork too.

    I hope I'm not canceling myself, here...

  • source
  • parent
  • [+] -21 points 9 months ago (3 children)

    Another fork freeloading off the Mozilla security team's work.

  • source
  • hideshow 3 child comments
  • 6 comments in c/arch@programming.dev view that post
    [–] 5 points 9 months ago* (1 child)

    Thank you for sharing!

    Very timely. The userconfig prefs look a lot like what I have myself and I was just the other day struggling with getting aur icecat to build. Will give it a spin!

    I don‘t suppose you are considering getting builds running for Android APKs? IronFox needs some competition..

  • source
  • hideshow 1 child comment
  • [–] [S] 1 point 9 months ago*

    On Android: Been looking a bit at that but right now it's likely not happening in public anytime soon unless someone else jumps in and starts driving it hint hint

    Hope it works for you and that we meet again on Codeberg!

  • source
  • parent
  • [–] [S] 3 points 9 months ago* (last edited 9 months ago)

    Update: Pre-built packages for Debian/Ubuntu (.deb), Fedora/SUSE (.rpm) and others are now built and published by Codeberg CI for each release:

    https://codeberg.org/konform-browser/source/releases

  • source
  • [+] 1 point 9 months ago (2 children)
  • [–] [S] 1 point 9 months ago (1 child)

    Thanks, would be cool to hear how it goes :)

    This is probably a good start https://codeberg.org/konform-browser/arch

    There's another contributor helping out with arch packaging. Expecting an update shortly there which makes it more idiomatic for arch (fetching and verifying firefox sources directly with makepkg instead of inside the build script). Nothing that we expect to cause any snags for you but just FYI!

  • source
  • parent
  • hideshow 1 child comment
  • load more comments (1 reply)
  • 1 comment in c/archlinux@discuss.tchncs.de view that post
    [–] [S] 1 point 9 months ago

    Update: Pre-built packages for Debian/Ubuntu (.deb), Fedora/SUSE (.rpm) and others (tarball) are now built and published by Codeberg CI for each release:

    https://codeberg.org/konform-browser/source/releases

  • source