Web

Fingerprinting vs locks

Keep locked We ship the most security first. Extra browser packs make this desktop rarer than stock Trivalent. That is a real trade, not a bug. Nothing below auto-unlocks.

Best crowd on Unwoke: rebase *-trivalent (same browser and trivalent_t as stock). Origin is a smaller crowd and a fatter SELinux domain. There is no overlay that is both “stricter than stock Trivalent” and “as anonymous as Chrome.”

  1. Phone-home off does not fingerprint websites

    Fedora countme, connectivity-check, DHCP hostname, LLMNR/mDNS registration, thumbnails, Privacy Sandbox, Cast, and Chrome-to-Google time queries are not a website fingerprint. Leave those off. They are how we beat stock without looking weirder on the web. Safe Browsing stays on (turning it off is a security cut — we will not default that).

  2. These packs make a site able to tell you from stock Trivalent

    JIT-less, WebGL/WebGPU off, extension installs blocked, site camera/mic/USB blocked by policy. Cover-Your-Tracks style tests will score that as more unique. They are also the attack-surface cuts. Default: keep them.

  3. If you choose to look closer to stock Trivalent

    One pack at a time, then restart the house browser. Do not flatten everything for one site.

    # closer to stock Trivalent (security down for that pack):
ujust set-brave-jitless off
ujust set-brave-isolation off
ujust set-brave-devices off
# put one back:
ujust set-brave-jitless on

    Leave HTTPS-only / no metrics / no ping (hardening pack) if you can — those leak less and are a smaller uniqueness hit than JIT+WebGL. Leave extensions blocked.

  4. Do not

    Do not install a random “anti-detect” browser. Do not turn off Safe Browsing to hide from Google (phishing lists go with it). Do not add extra Cloudflare DoH on top of ujust dns-selector. Do not Bubblejail Trivalent.

Site broken, not anonymity: A site looks broken. Fast path on the box: ujust why then this page (Setup also has a Fingerprinting button).