Waterfox is an open-sourceweb browser for x64, ARM64, and PPC64LE systems. It is intended to be ethical[citation needed] and (in Waterfox Classic) maintain support for legacy extensions dropped by Firefox, from which it is forked. There are official releases for Windows (including a portable version), Mac OS, Linux and Android in two versions: Classic (Year.Month) and Current (G.x.x.x).
Unsigned extensions and legacy add-ons are allowed from the following sources: Archived Add-ons for Firefox, LegacyCollector, Thunderbird Firefox Add-on Archive, Classic Add-on Archive Extension, Add-ons for Firefox, Chrome Webstore and Opera Addons Store[4]
Sponsored tiles on the new tab page are removed[5]
A new "Duplicate Tab" command is added
A locale selector is added to about:preferences > General (further improved by PandaCodex)
Cookie Prompt has been reimplemented. Firefox later implemented a more advanced cookie control feature as part of its tracking protection initiative
Passwords and logins manager
Synchronize bookmarks, history, tabs, passwords, add-ons, and preferences across devices
Waterfox Classic is continuing to support the long-standing XUL and XPCOM add-on capability that Firefox removed in version 57.[6][7][8][9] The "Classic" version is actively supported, based both visually and internally on an older version of Gecko, and supports add-ons from XPCOM and XUL.[10] Since 2017 its version remained on Waterfox version 56, for now they use the (Year.Month) format for their versioning scheme.[11]
Vulnerability
Waterfox Classic has many unpatched security advisories. The developer states that "changes between versions so numerous between ESRs making merging difficult if not impossible".[12][13]. As of June 2022 Waterfox makes the following unsolicited connections at startup without user's consent:
www.waterfox.net (as a startup homepage user did not set up);
firefox.settings.services.mozilla.com (in background, port 443, SSL, sends telemetry and various browser states and settings to Mozilla Database along with unique ID,);
push.services.mozilla.com (in background, port 443, SSL);
ocsp.digicert.com (in background, port 80, plain text, possible vulnerability with SSL certifications)
www.bing.com (in background, port 443, SSL, Microsoft tracking connections, across web);
location.services.mozilla.com (in background, port 443, SSL, geolocation tracking services);
shavar.services.mozilla.com.
It is also possible to set Internet connections completely separate from the system (preconfigured DNSes, incl. Cloudflare that blocks anonymity networks, e.g. TOR or Ip2 networks) just like in Firefox, hence the browser will not obey system-wide settings. For many security and privacy reasons, a software should always obey system-wide settings established by the administrator and neither user or software should arbitrary connect to unsolicited networks (e.g. Cloudflare DNSes instead of private corporate DNSes). Praised for security and code correctness OpenBSD compiles Firefox without this dangerous function. None of the user application should set such a precedence for such dangerous behavior.
History
Waterfox logo used until 2015
Waterfox logo used from 2015 to March 2019
Waterfox logo used from March 2019 to June 2019
Waterfox logo used from June 2019 to the present
Waterfox was first released by Alex Kontos[14] on March 27, 2011 for 64-bit Windows. The Mac build was introduced on May 14, 2015 with the release of version 38.0,[15] the Linux build was introduced on December 20, 2016 with the release of version 50.0,[16] and the Android build was first introduced in version 55.2.2.[17] Version 29.0, released on July 22, 2015, had a build for iOS.
From May 12, 2015 to November 12, 2015, Waterfox had its own exclusive charity search-engine called "Storm".[18] After using Ecosia as the default search-engine for a brief time, it now defaults to using Bing.
On May 7, 2019, with version 68.0a1, the first alpha version of the next generation of Waterfox was released based on Mozilla's Quantum project (used in Firefox versions 57 and later), which would be named Waterfox Current.[19]
In October 2019, the naming scheme of releases changed to follow the syntax YYYY.MM.X for future releases, where X indicates incremental hotfixes. There was also a division into two branches, classic and current.
In December 2019, System1, an advertising company which portrays itself as privacy-focused,[20] acquired Waterfox.[21][22]
In November 2020, Waterfox G3 was released. It is based on Firefox 78 ESR.[23]
In February 2020, Alex Kontos faced criticism over selling Waterfox to System1, an advertising company.[25][26]
In 2018, How-To Geek advised users to not use Firefox forks such as Waterfox because security updates take longer to be incorporated into the forks compared to Firefox.[27]
