Once I would have used this, but I can't just can't bring myself to trust forks by small or unknown teams. We trust browsers with passwords to everything in our lives, like our bank details. The FAQ doesn't even cover who created LibreWolf. Why should I trust them?
Even if I do trust the developers, are they really capable of keeping a modern complex browser secure in the hostile environment of todays internet? It has millions of lines of code in multiple languages with a history going back 2 decades. I can't find:
- who is responsible for the project security
- their CVE policies
- policies for back porting Firefox patches etc
- update schedules
They also removed the auto-updater which is critical to ensuring browsers get the latest patches.
I'm really skeptical about the (undocumented) "hundreds of privacy/security/performance settings and patches" they claim to have implemented. What exactly cannot be achieved through settings and addons?
Even if I do trust the developers, are they really capable of keeping a modern complex browser secure in the hostile environment of todays internet? It has millions of lines of code in multiple languages with a history going back 2 decades. I can't find:
- who is responsible for the project security
- their CVE policies
- policies for back porting Firefox patches etc
- update schedules
They also removed the auto-updater which is critical to ensuring browsers get the latest patches.
I'm really skeptical about the (undocumented) "hundreds of privacy/security/performance settings and patches" they claim to have implemented. What exactly cannot be achieved through settings and addons?