Like if you have 3 different crypto imlpementations, you have times more teams that have to get a thing right. It seems way easier to try and get it right just once.
Perhaps there's a holistic idea of "if one browser has an issue, at least it doesn't affect 100% of them" but given what CVEs look like in reality (often variations of the same attack across multiple programs) it seems like the cost/benefit would not be in our favor
This happened with Cisco routers back in the day, Juniper had to add a flag to make a routing protocol compatible with Cisco because Cisco implemented it wrong but had so much dominance that Juniper had no choice if they wanted to get in the game.
Not everyone gets hit with every attack. Biological systems work this way too.
Without serious competition you eventually get IE6.
Is this really true? someone posted somewhere(can't find it) where it shows Firefox has a worst security record compared to Chrome.
Also, in the past, Firefox was left out from hacking browser competitions because it was to easy to hack.
Yes some of that might be thanks to PZ, but that’s beside the point, isn’t it?
Choosing Mozilla’s platform would have been better for code diversity, which has its own distinct security benefits.