GPU vs integrated graphics hardware, browser canvas fingerprinting, and multi- or dual-boot systems

My goal is to ensure that two operating systems installed side-by-side on the same device are unable to return the same canvas fingerprint, when a modern browser is allowed to run javascript without any anti-fingerprint restrictions in pla… Continue reading GPU vs integrated graphics hardware, browser canvas fingerprinting, and multi- or dual-boot systems

How to do auth without user interaction in an enterprise environment?

We are building a Chrome Extension that will be force-installed on each employee’s browser for the companies we work with.
We currently use OAuth but many employees are forgetting to sign up.
We are thinking of replacing OAuth with somethi… Continue reading How to do auth without user interaction in an enterprise environment?

With HTTPS-only mode in Firefox, may I still need HTTPS Eveywhere addon?

Firefox has a built-in toggle in settings to enforce HTTPS-Only mode. When enabled, the browser attempts to redirect to HTTPS every time and, if fails, blocks access to the website in the same way that it blocks access when, e.g., the SSL … Continue reading With HTTPS-only mode in Firefox, may I still need HTTPS Eveywhere addon?

Why are there no modern web browsers that allow extension access to SSL information about the site you are browsing?

In all my Googling, I found one version of FireFox that allowed it temporarily a long time ago, it has been discussed on the Chromium development forums for years, but yet, as of today, there is still no way for an end user to view and/or … Continue reading Why are there no modern web browsers that allow extension access to SSL information about the site you are browsing?