They refuse to do it because the idea has absolutely no merit to it. If there's a virus on your computer that could steal your data, it can just wait till you unlock that data to steal it. There is zero practical benefit to implementing your suggestion.
post
"full-disk encryption" is the search keyword you're looking for
I'm a little confused as to how that would help with privacy/security.
When your browser is open and 'unlocked' a virus could still read the data.
It's the same thing with full disk encryption, if you get a virus on the running system it doesn't matter.
-
its open source, you can submit your patch... if they don't accept it, you can fork it
-
having a application try to make up for deficiencies of a operating system is a losing battle, better to isolate sensitive data at a container/vm level. i.e. Qubes, you can encrypt all the data at rest, and only unencrypt it when needed.
Isn't your computer disk encrypted already?
Otherwise you seem to want jails or sandboxes to protect each app, with access denied by default. That sounds more like Android, or possibly Qubes OS: https://en.m.wikipedia.org/wiki/Qubes_OS
Tired of seeing all these anti Firefox posts lately, especially when they instantly get debunked in the comments (which I am thankful for)
That doesn't save you froma virus
Which is why the suggestion won’t work either. Say your computer is infected and you’re not aware. It lies in wait for you to launch Firefox and enter your decryption password, then it takes what it wants. It’s basically a useless idea.
If you have full disk encryption you’re protected if someone takes your disk, but as long as it’s running anything can wait for it to be decrypted. You’d need container/jail/isolation at the OS level to be effective which is outside the scope of Firefox.
i used to use an encrypted volume on a flash drive for a 'portable' mail client and its mail store.
could do the same with browser or any other software in 'portable' form that doesn't leave data behind on the pc it's run from.
Is a local sandbox not an option for you?
Firejail on linux Sandboxie on windows
Sandboxie might help? (For Windows)
Chrome does lock some of your browser data to the current (windows) account. Which is why all chromium profiles aren't portable. You can't move your profile to another pc.
As for myself, I use an encrypted container for my ff profile. A fully encrypted disk is a better choice though.
all 19 comments