News for hackers. Stuff that matters.

A comment on Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path. Parent comment

Re:Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path by deprave on Tuesday June 13, 2017 @05:37PM (#14548871)
It's simple. There is no way Firefox can guarantee anywhere near the level of stability and security Chrome offers without a process per tab. OS primitives operate in terms of processes (scheduling, memory, sandboxing, and so on) and Firefox will not be able to use any of them. I really want to use Firefox, but I'm almost certain not doing a process-per-tab will be the last nail in its coffin. The code will be more complex to maintain, and no advantages in security or performance will be gained, leading to less users and thus less maintainers.

If there was one thing that caught my attention with Chrome back when it was released (2008?) it was its reliance on OS primitives (processes) as the building blocks for a stable and secure browser. This is essentially the same argument the Varnish folks did when comparing to other proxy solutions like Squid back in the day. I don't understand why Firefox is taking this route.

[ Parent | on HN ]
Re:Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path by pcwalton on Tuesday June 13, 2017 @06:10PM (#14549100)
> There is no way Firefox can guarantee anywhere near the level of stability and security Chrome offers without a process per tab.

It has no security benefit without Site Isolation (which isn't unconditionally a process per origin either for performance reasons). In both Chrome and Firefox, any site can embed another cross-origin site in an iframe, and it will share a process (and a main thread).

Chrome does not use an unconditional process per tab. Nobody would.

[ Parent | on HN ]
Re:Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path by AgentME on Wednesday June 14, 2017 @12:55AM (#14550730)
I believe Chrome is moving to having cross-domain iframes in separate processes. I remember seeing a flag for it.
[ Parent | on HN ]
Re:Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path by pcwalton on Wednesday June 14, 2017 @01:02AM (#14550742)
Not for all sites unconditionally, only for those that opt into site isolation or are high value. Too many sites have tons of iframes to do otherwise.
[ Parent | on HN ]
Re:Firefox 54: E10S-Multi, WebExtension APIs, CSS Clip-Path by eeperson on Tuesday June 13, 2017 @05:45PM (#14548939)
Chrome doesn't appear to default to process per tab either. See: https://www.chromium.org/developers/design-documents/process...
[ Parent | on HN ]