Using microsoft edge with Proton vpn?

[deleted]

On my pc (windows 11) I used firefox in the past and then switched to brave. To this day I use brave and am doing very well. At work I am obliged to use microsoft edge, I must say I am doing very well. Does it make sense to use microsoft edge with proton vpn and all privacy settings turned on? (e.g., https on, do not store password, tracker on hard, do not track on, security on hard web, etc...) Or better to keep using brave always with proton vpn? I think if you enable all the settings by default, maybe the browsers are almost all the same in the end. I am looking for security and also privacy.

other8026

[deleted] if on GrapheneOS the best browser to use is Vanadium, in my opinion.

[deleted]

On graphene I use Vanadium.
I am talking about windows 11, if it makes sense to use edge with all privacy settings on and proton vpn on. I want security and privacy

TheGodfather

[deleted]

Edge for sure has been one of the most secure browsers on win 11 over the years. But the biggest difference to other browsers (JIT toggle with working WASM) is now available on all Chromium-based desktop browsers with a different implementation. It still has a few differences over other Chromium browsers which you can see with the sysinterals process explorer. For example it has stack protection enabled, while Chrome doesn't. Also the integrity token shows Appcontainer instead of untrusted for the renderers.

The question is are you willing to deal with all the privacy invasive features Edge has and will likely continue to get. You need to check each update for new invasive features. Would recommend to check out Edge's privacy whitepaper to get an impression of Edge's privacy: https://learn.microsoft.com/en-us/microsoft-edge/privacy-whitepaper/

Brave has a few advantages over Edge: much better content blocker built-in, private by default, better state partitioning, fingerprinting mitigations, ephemeral storage and a few other features.

[deleted]

Thanks, i continue on Brave

mtukl

[deleted] Good choice! I would've advised that, too. An open-source browser is always better to trust than running loads of unknown code you can't even look at on your own device.

GGORG

I'd like to use Vanadium, but Cromite has way more features in my opinion (the biggest one is content/ad blocking - WHY isn't this in Vanadium??)
The only issue I have( which I have already reported to the devs) with Cromite is that WebAuthn doesn't work

FlipSid

GGORG
Vanadium has Content / Ad Blocking

Xtreix

[deleted] I am talking about windows 11, if it makes sense to use edge with all privacy settings on and proton vpn on. I want security and privacy

In addition to the explanations provided by TheGodFather, Edge is also the only web browser on Windows to correctly support hardware isolation with WDAG, so it's also worth using it if you're looking to reduce the attack surface. Now yes, it's not a very privacy-friendly Chromium browser, but on the other hand, if your machine is already running Windows, you're already transmitting data to them.

GGORG I'd like to use Vanadium, but Cromite has way more features in my opinion (the biggest one is content/ad blocking - WHY isn't this in Vanadium??)

Vanadium is more secure and private than Cromite, Vanadium support ad blocking, it is planned to extend ad blocking to uBlock Origin lists. In Vanadium, open a web page, press the icon to the left of the URL, then in Permissions, you'll find Javascript JIT and ads blocked.

[deleted]

Xtreix Edge is also the only web browser on Windows to correctly support hardware isolation with WDAG, so it's also worth using it if you're looking to reduce the attack surface.

Interesting, doesn't brave have anything similar?

TheGodfather

[deleted] Interesting, doesn't brave have anything similar?

No. Basically only MS Edge and MS Office Enterprise have it. It's a lightweight VM and will be deprecated anyway:
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-windows-defender-application-guard

TheGodfather

Xtreix if your machine is already running Windows, you're already transmitting data to them.

It still matters a lot which data is transmitted and which is not. It's not the same between windows and edge.

missing-root

Yes agree. MSEdge may be secure, but we are talking about very sophisticated security improvements against attacks needing a 0day on modern worldwide used Webbrowsers by multiple of the richest companies on earth.

It is simply not really likely that this enhanced protection will be needed, while it is a fact that this browser collects a ton of data (unlike ungoogled Chromium or Firefox) that Windows doesnt collect.

GGORG

Xtreix Vanadium is more secure and private than Cromite, Vanadium support ad blocking, it is planned to extend ad blocking to uBlock Origin lists. In Vanadium, open a web page, press the icon to the left of the URL, then in Permissions, you'll find Javascript JIT and ads blocked

Ok, but

we don't have control over the adjusts (you mentioned we will soon but anyway)
I think it is still missing a lot of the features from Cromite mentioned on https://github.com/uazo/cromite/blob/master/docs%2FFEATURES.md (not necessarily privacy&security - for example I use the sharing functionality quite often to open a link directly in incognito or when I have to share a link instead of opening it directly)

Can someone point out the major pros and cons of switching from Cromite to Vanadium?

[deleted]

TheGodfather
So since the function will be disabled on EDGE, better to use brave 100%.
Correct?

TheGodfather

[deleted]

Brave is a good choice, because it strikes a good between privacy and security and is reasonable private by default, while Edge isn't. Which browser to choose depends on your priorities.

PeterPan

Tbh, when using windows it really does not matter which browser you use. You reveal either way enough data. Think about it...

wuseman

PeterPan
You can disable telemetry in Windows in two minutes using third party tools.

Also I personally care infinitely more about not letting websites track me or infect my device, than I care about the OS sending anonymous telemetry about my usage of said OS. I can't imagine I'm alone in that.

Edge sadly doesn't have anti fingerprinting in the way Brave does, so even with a VPN you'll stick out if using Edge.

Xtreix

TheGodfather No. Basically only MS Edge and MS Office Enterprise have it. It's a lightweight VM and will be deprecated anyway:
https://learn.microsoft.com/en-us/deployedge/microsoft-edge-security-windows-defender-application-guard

Thanks for this information, I wasn't aware of it, it's a bit of a shame though.

wuseman You can disable telemetry in Windows in two minutes using third party tools.

You're bringing in a massive amount of attack surface when you have no certainty that its tools are working properly or that it won't cause unexpected behavior, the only way to reduce telemetry as much as possible is to use Group Policy and the registry with Windows Enterprise.

https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services
https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints