On Sat, Jan 05, 2019 at 03:38:16PM +0200, Mihai Popescu wrote: > Hello, > > I see there is some work in Chromium to implement secure browsing. I > was using both Chromium and Firefox over the past years. If I got it > right, here is a summary of implementations: > Chromium: W^X, pledge, unveil > Firefox: W^X >
I'm going to throw in the question of how is upstream itself a question of security. These are very big moving targets. Are they proceeding cautiously forward or hell burnt for leather at any cost? I guess a good metaphor would be OpenBSD constantly breaking httpd and pf in order to make them more secure. And releasing broken versions. Is upstream doing this sort of thing as they develop? I also agree, no browser war. I have to use both. Each one fails at something important I do. Chris Bennett

