The Tor Project and VPN provider Mullvad have unveiled Mullvad Browser, a privacy-focused web browser that is being developed jointly. Mullvad Browser is technically based on the Firefox engine and includes almost all the changes from the Tor Browser, with the main difference being that it does not use the Tor network and sends requests directly (a variant of the Tor Browser without Tor). It is assumed that Mullvad Browser may be of interest to users who do not want to work through the Tor network, but who want the mechanisms available in Tor Browser to increase privacy, block visitor tracking and protect against user identification. Mullvad Browser is not tied to Mullvad VPN and can be used by anyone. The browser code is distributed under the MPL 2.0 license, development is carried out in the Tor project repository.
For added security, Mullvad Browser, like Tor Browser, has an "HTTPS Only" setting to encrypt traffic on all sites where possible. To mitigate the threat from JavaScript attacks and ad blocking, NoScript and Ublock Origin add-ons are included. The Mullvad DNS-over-HTTP server is used to determine the names. Ready assemblies are generated for Linux, Windows and macOS.
By default, private browsing mode is used, which deletes cookies and browsing history after the session ends. There are three security modes available: Standard, Safer (JavaScript is enabled for HTTPS only, support for audio and video tags is disabled) and Safest (no JavaScript). DuckDuckgo is used as a search engine. Includes the Mullvad add-on to display information about the IP address and connection to Mullvad VPN (use of Mullvad VPN is optional).
The WebGL, WebGL2, Social, SpeechSynthesis, Touch, WebSpeech, Gamepad, Sensors, Performance, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, Permissions, MediaDevices APIs are disabled or restricted to protect against user tracking and visitor-specific highlighting. enumerateDevices and screen.orientation, as well as telemetry sending tools, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, "link rel=preconnect" are disabled, data return is organized only about a part of installed fonts. To block identification by window size, the letterboxing mechanism is used, which adds padding around the content of web pages. Removed password manager.
Differences from Tor Browser: Tor network is not used, there is no support for different languages, WebRTC and Web Audio API support is returned, uBlock Origin and Mullvad Browser Extension are integrated, Drag&Drop protection is disabled, warnings are no longer displayed during downloads, leak protection between tabs is disabled in NoScript information that can be used to identify the user.
Source: opennet.ru