Browser privacy discussions often focus on what's technically possible to block. But the real question is: what are the actual threats to your privacy when browsing, and what actually helps against them?
Here's a structured threat model for browser privacy, with Firefox as the reference browser.
The Four Main Browser Privacy Threats
1. Commercial Tracking (Advertising Networks)
What it is: Ad networks build profiles of your browsing habits across sites to target ads. They do this via third-party cookies, fingerprinting, and cross-site pixels.
Scale: This affects everyone. If you browse the web, companies like Google, Meta, and dozens of smaller ad networks have data on your browsing.
What Firefox does by default:
- Enhanced Tracking Protection (ETP) Strict blocks known third-party trackers by default
- Total Cookie Protection isolates cookies per site (third-party cookies can't track you across sites)
- ECH hides the SNI in TLS connections
What additionally helps:
- uBlock Origin in strict mode (blocks more than ETP's blocklist-based approach)
- Custom DNS (NextDNS) with additional blocklists
What doesn't help much: "Private browsing" / incognito — this clears cookies after session but doesn't block real-time tracking. Trackers still track you during the session.
2. Fingerprinting
What it is: Instead of cookies, scripts collect dozens of browser properties (fonts, canvas rendering, screen resolution, plugins, timezone, WebGL capabilities) and hash them into a "fingerprint" that identifies you without cookies.
Scale: Large ad networks use it. Less common than cookie tracking but harder to block.
What helps:
-
privacy.fingerprintingProtection = true(Firefox 117+): Standardizes many properties to reduce uniqueness - Tor Browser's approach: All users look identical (strongest protection, but impractical for daily use)
- uBlock Origin with strict mode: Blocks many fingerprinting domains
What doesn't help: Ad blockers alone — fingerprinting scripts on first-party domains won't be blocked
3. ISP/Network Surveillance
What it is: Your ISP can see which hostnames you visit (via DNS queries and SNI in TLS). Governments in some countries compel ISPs to log this data. On public WiFi, anyone on the network can see unencrypted HTTP.
Scale: Depends on your country. In the US, ISPs can sell browsing data. In more authoritarian contexts, this is a more serious threat.
What helps:
- DNS over HTTPS: Encrypts DNS queries, hides which hostnames you look up from ISP
- ECH: Encrypts SNI, hides exact hostnames from network observers
- VPN: Routes traffic through a different server, hiding your real IP and DNS from ISP
- HTTPS-Only Mode: Eliminates unencrypted HTTP connections
What doesn't help: Privacy-focused browsers alone (without DoH or VPN) — browser choice doesn't change network-level visibility
4. Site-Level Tracking (First-Party)
What it is: The site you're visiting tracks your behavior within their site (page views, clicks, time spent, user ID). This includes analytics like Google Analytics, user behavior tools like Hotjar.
Scale: Universal — nearly every commercial website does this.
What helps:
- uBlock Origin: Blocks Google Analytics on most sites
- Firefox's ETP: Blocks some analytics scripts
- Privacy-respecting analytics alternatives: Sites using Plausible or Fathom instead of GA won't send data to Google at all
What doesn't help: This is the hardest to fully block. Sites can do first-party tracking with their own server-side code that's impossible to block from the browser.
The Threat That Gets Overlooked: Account Correlation
Your browsing is immediately identifiable when you're logged into any Google, Facebook, or Apple service. IP address, device fingerprint, and browsing pattern link your anonymous browsing to your identity.
What helps:
- Firefox containers: Browse social media in an isolated container
- Log out of social/Google accounts while browsing other content
- Don't install Google/Facebook browser extensions
This is behavioral, not technical. No browser can help if you're voluntarily logged into tracking services.
Practical Risk Tiers
Most users: Commercial tracking is the main concern. ETP Strict + uBlock Origin addresses 90% of it. Free, easy, effective.
Privacy-concerned users: Add custom DNS (NextDNS), DoH forced mode, ECH. Reduces ISP surveillance significantly. Marginal effort, meaningful improvement.
High-risk users: Add VPN, Mullvad Browser or Tor Browser for sensitive activities. IP-based surveillance and fingerprinting become concerns. Requires trade-offs in usability.
Threat from nation-state actors: Tor Browser + Tails OS + OpSec discipline. Incompatible with normal browsing. Use for specific activities, not daily use.
Firefox's Position
Firefox addresses commercial tracking well with zero configuration (ETP Strict default). With ECH and DoH, it also addresses ISP surveillance. Fingerprinting resistance is available via about:config.
Where Firefox doesn't help:
- First-party site tracking (by design — blocking legitimate analytics would break sites)
- Threats from governments with legal access to the sites you visit
- Social media correlation when you're logged in
For the threat model of most users (commercial tracking), Firefox's defaults plus uBlock Origin is genuinely protective and requires minimal maintenance.
Top comments (0)