Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Container Tabs

wiki.mozilla.org

Post reply on HN
Print view View original

211–220 of 222 posts

Re: Container Tabs

#211

Post by tinus_hn »

the8472 wrote: post #79
rlpb wrote: post #39

I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Say site www.a.org includes an image from www.evilcorp.org, and www.evilcorp.org sets a cookie. When I then go to www.b.org and it includes an image from www.evilcorp.org, I don't expect the cookie to be sent back. In other words, the cookie should be tied to www.a.org, even though it actually c…

> I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Sadly, that is currently not possible, not even with addons, because the containers can only be assigned when creating tabs, not when navigating them. There is a related feature (1st party isolation) but that is always-on, so it fails the unless I say otherwise aspect. I have filed a bug expla…

It's more difficult than one might think to specify exactly while navigating where the old page goes away and the new one starts. Especially considering things like frames.

Also if you start a new context every time you navigate you can't for instance log into Google.

Re: Container Tabs

#212

Post by hobarrera »

3minus1 wrote: post #207
SAI_Peregrinus wrote: post #109

Earlier quoted context omitted.

You'd probably like Self-Destructing Cookies[1]. It's an addon that deletes all cookies set by a page after you close the tab by default, though you can change it per-page to delete only on closing the browser or never. It doesn't prevent the cookies from being set, but it does effectively prevent tracking if you close tabs frequently. [1] https://addons.mozilla.org/en-US/firefox/addon/self-destruct...

this is just like browsing in incognito mode

Not entirely, but it has it's similarities. Differences are:

* History (Personally, can't live without it). * Whitelist (HN's cookies, for example, I keep). * Saving submitted form data (for auto-complete). * 10-seconds remorse time to reopen that tab and have it stay as it is!

Re: Container Tabs

#213

Post by the8472 »

tinus_hn wrote: post #211
the8472 wrote: post #79

Earlier quoted context omitted.

> I would like to be able to configure my browser to open every URL in a domain-specific "container", unless I say otherwise. Sadly, that is currently not possible, not even with addons, because the containers can only be assigned when creating tabs, not when navigating them. There is a related feature (1st party isolation) but that is always-on, so it fails the unless I say otherwise aspect. I have filed a bug expla…

It's more difficult than one might think to specify exactly while navigating where the old page goes away and the new one starts. Especially considering things like frames. Also if you start a new context every time you navigate you can't for instance log into Google.

Addons get the necessary information. They can distinguish top level navigation from frames. And they could easily impose rules that keep google on the same container when needed.

That's the point of having an addon API instead of fixed behavior, to implement logic around such complications.

Re: Container Tabs

#214

Post by exadeci »

hackuser wrote: post #163
mverwijs wrote: post #142

Earlier quoted context omitted.

Old perhaps, but userfriendly this is not.

I wonder how many users understand the concept of profiles and the session isolation they provide, want to use them, yet find the command line too difficult to use.

Most user won't even be aware of the possibility of using profiles, ask any of your relatives.

While if you had a "Create a new profile" button that does it in one step and that they would advertise on install much more people would be using it, even if it's just for family members separation.

Re: Container Tabs

#215

Post by nkkollaw »

It would be cool if there was a shortcut to hide all other tabs but a certain group.

I would love if I could use this to organize my 100 tabs I always have open.

Re: Container Tabs

#216

Post by tinus_hn »

the8472 wrote: post #213
tinus_hn wrote: post #211

Earlier quoted context omitted.

It's more difficult than one might think to specify exactly while navigating where the old page goes away and the new one starts. Especially considering things like frames. Also if you start a new context every time you navigate you can't for instance log into Google.

Addons get the necessary information. They can distinguish top level navigation from frames. And they could easily impose rules that keep google on the same container when needed. That's the point of having an addon API instead of fixed behavior, to implement logic around such complications.

It's actually quite a difficult problem for the browsers themselves and they have all the information that's available. There have been a lot of issues with showing the new URL while the old page is still in the browser, for instance.

Having special cases for every exception doesn't scale. What about Outlook Web Access using Microsoft accounts or domain accounts? Are you going to build an add on for every webmail installation?

Re: Container Tabs

#217

Post by raphaelh »

There's a nice addon for Firefox, called Priv8: https://addons.mozilla.org/en-US/firefox/addon/priv8/

This is a Firefox addon that uses part of the security model of Firefox OS to create sandboxed tabs. Each sandbox is a completely separated world: it doesn't share cookies, storage, and a lots of other stuff with the rest of Firefox, but just with other tabs from the same sandbox.

Re: Container Tabs

#218

Post by 234dd57d2c8db »

nikcub wrote: post #94

This is a neat idea but it doesn't implement the main reason I use separate profiles in Chromium - different security contexts based on how much you trust a site. Example: my main general browsing profile has flash, PDFs and all plugins disabled, absolutely all handlers switched off, all hardware access off, WebGL switched off, no account logins and uBlock Origin set to aggressively block most third-party requests. M…

Don't forget about firejail. No reason your browser process should be able to read your ssh keys.

Re: Container Tabs

#219

Post by WorldMaker »

exadeci wrote: post #214
hackuser wrote: post #163

Earlier quoted context omitted.

I wonder how many users understand the concept of profiles and the session isolation they provide, want to use them, yet find the command line too difficult to use.

Most user won't even be aware of the possibility of using profiles, ask any of your relatives. While if you had a "Create a new profile" button that does it in one step and that they would advertise on install much more people would be using it, even if it's just for family members separation.

Old Netscape/Firefox builds used to start with the Profile creation/selection screen by default (which is the -ProfileManager CLI option that remains today) and someone can correct me if I am wrong, but the consensus seemed to be that it confused people more than it helped them.

The majority of people already separate family members with different user accounts on the machine or mostly just don't seem to care.

This seems to be the interesting UX compromise that the new "Container Tabs" is trying to meet "where they live": the users that could use some of the advantages of profiles without the full overhead of using multiple profiles. It will be interesting to see if the compromise is picked up by average users.

(Fwiw, I've used multiple profiles in Firefox off and on for decades but have yet to find a relative I'd recommend that to.)

Re: Container Tabs

#220

Post by cbsmith »

Manishearth wrote: post #160
cbsmith wrote: post #138

Earlier quoted context omitted.

I'm not sure I understand the benefit of being able to share the same browser window.

I personally like keeping things in a single browser window, and find it super annoying when I have multiple windows. But I sometimes want to use a site whilst logged out or logged in to a different account, or just don't want to be tracked. across the web. It's nice to be able to do it all in one place. It also helps enforce a better discipline in keeping parts of your life (and thus your online identity) separate s…

Multiple windows sure seems like a clean visual signal that you are in a different privacy context...
Post reply on HN