The more complex question is what settings to use with CanvasBlocker. There are a ton, they can be quite overwhelming and confusing, and even the ArkenFox recommendations leave some ambiguity.
Personally I tested 4-5 hours many combinations from different fingerprint-test sites. When I check the result I see that resist-fingerprint option of Firefox does not work well for below list:
Audio API
DOMRect API
SVG API
TextMetrics API
Therefore I enabled resist-fingerprint but I also use only CanvasBlocker extension and I have only enabled above list. (For example the “Canvas API” protection of CanvasBlocker is disabled).
Okay read through this. Tbh i think for the average reader this is waay too complex of a topic. We recommend arkenfox only for advanced users, I assume they can read the wiki here too. Not sure if its fit for recommending on PG. Users who struggle with all this probably are better of using Brave.
I am fully aware. I just think this add-on will be too complex for those users too. Like @mika mentioned its not so straightforward how to use it. I feel that if this is at all a concern to those users they might be better of using a different browser. If it’s not convenient we scare people away.
That’s true (in fact it is now in the “don’t bother” section). Firefox is rolling out a new anti-fingerprinting feature called privacy.fingerprintingprotection (FPP). Arkenfox no longer recommends CanvasBlocker because FPP has made it redundant/unnecessary [if FPP is enabled].
The previous Arkenfox recommendation was:
Use privacy.resistfingerprinting (RFP) if you can, if not use the CanvasBlocker extension.
The current Arkenfox reccomendation is:
Use privacy.resistfingerprinting (RFP) if you can, if not use privacy.fingerprintingprotection (FPP)
For reference: FPP will become the default in Arkenfox in future releases. (more info on differences between RFP and FPP can be found here, and some context on why the CanvasBlocker recommendation was removed here
Is this recommendation (RFP) also true for Linux and MacOS users? There are people who say that it is only suitable for Windows users due to a fake of the user agent that is set to Windows, however, MacOS and Linux still reveal their OS via JavaScript.
RFP is not difficult to detect so you are already in the bucket of RFP users. Since having windows in your user agent string with RFP doesn’t subdivide this bucket further, it doesn’t matter.