Advice Request Anyone using Chrome's flags to increase security and/or privacy

[Windows_Security]

Are members using the beta features of Chrome browser by tweaking the about://flags settings?

Privacy enhancement
#disable-hyperlink-auditing
#reduced-referrer-granularity

Security improvements RC (which are available a very long time so they won't give problems)
#extension-content-verification (set to strict)
#enable-permissions-blacklist

Security improvements Beta (most are available since 2012, so on my PC stable for at least two years)
#enable-site-per-process (which I always use with the flag below to for performance and resource)
#enable-top-document-isolation (puts all isolated iframes together in stead of each in its own)
#disallow-doc-written-script-loads
#enable-framebusting-needs-sameorigin-or-usergesture

 

[Windows_Security]

@mekelek The picture is only for AppContainer flag, you need to go into about flags to enable the others

 

[mekelek]

@mekelek The picture is only for AppContainer flag, you need to go into about flags to enable the others

yes i'm aware, but most of these flags are also set to Default by default. either way, i don't notice any issues yet.

 

[HarborFront]

Security improvements Beta (most are available since 2012, so on my PC stable for at least two years)
#enable-site-per-process (which I always use with the flag below to for performance and resource)
#enable-top-document-isolation (puts all isolated iframes together in stead of each in its own)
#disallow-doc-written-script-loads
#enable-framebusting-needs-sameorigin-or-usergesture

@Windows_Security

I just checked my Chrome v59.0.3071.109 but couldn't find those highlighted in red

I know some of the flags were obsoleted with newer versions of Chrome. Can you confirm their presence?

Thanks

 

[Deleted member 178]

I do all tweaks i deems useful, if they create issues, i just reload a RX snapshot

 

[HarborFront]

If anyone is using Emsisoft, do NOT set Chrome flag for AppContainer to Enabled. It will break plugins and you will not be able to change the flag until Emsisoft is uninstalled.

Hi @Lockdown

Are you referring to plugins in Chrome? I couldn't find the plugins when I type chrome://plugins

Google removes Plugin controls from Chrome - gHacks Tech News

If yes, then enabling Appcontainer in Chrome has any effect on Emsisoft products or vice versa?

Thanks

 

[generalwu]

@Windows_Security Hi, thank you for the recommendation.

My browsing experiences on my Chromebook became better once I applied the flags (Not #Could_impactwebsites)

 

[tonibalas]

AppContainer here too in Cent.
As for the rest i will give them a try to see if they can improve my browsing

 

[DeepWeb]

Incredible recommendations!

#enable-http-form-warning
Warns you of all form fields that are on non-HTTPS sites

#ssl-version-max
Set to TLS 1.3

#enable-autofill-credit-card-upload
Disabled! Nope nope

#windows10-custom-titlebar
Not so much security, but it makes the title bar match Windows 10, including those in custom themes.

Update: The AppCointainer flag really bogs down my ping for some reason so I disabled it again. Site lookups would take almost 3 sec.

 

[Mr.X]

#enable-site-per-process (which I always use with the flag below to for performance and resource)

Strange here at ghacks they still using the cmd line switch "--process-per-site", when there's a flag available.
Save memory in Chrome by using one process per site - gHacks Tech News

 

[Trooper]

App container gave me errors. i better leave to default. THANKS for the others tricks and his explanation.

Are you running EIS or EAM? Is so, it bork Chrome with app container enabled.

 

[Evjl's Rain]

App container gave me errors. i better leave to default. THANKS for the others tricks and his explanation.

appcontainer itself doesn't have any problem
Emsisoft behavior blocker causes problems to appcontainer, 100%
they haven't fixed it yet, don't know if they really want to

 

[212eta]

7 Chrome Flags You Should Enable for a Better Browsing Experience - Make Tech Easier

 

[given]

i have found that when i enabled "Brotli Content-Encoding" i feel like the chrome browser run way too faster than before

 

[Arequire]

i have found that when i enabled "Brotli Content-Encoding" i feel like the chrome browser run way too faster than before

+1
Had it enabled for a while now and there's definitely a noticeable speed increase for certain sites.

 

[Trooper]

i have found that when i enabled "Brotli Content-Encoding" i feel like the chrome browser run way too faster than before

Thanks just enabled to check this out.

 

[SHvFl]

7 Chrome Flags You Should Enable for a Better Browsing Experience - Make Tech Easier

Did you try Experimental QUIC protocol? Any good or side effects?

 

[212eta]

Did you try Experimental QUIC protocol?

Not yet...

 

[Mr.X]

Did you try Experimental QUIC protocol? Any good or side effects?

I enabled it just right now. Let's see what happens.

 

[eXDj]

Privacy enhancement
#disable-hyperlink-auditing - disable ?
#reduced-referrer-granularity - activates ?

Security improvements RC (which are available a very long time so they won't give problems)
#extension-content-verification (set to strict) - enforce strict ?
#enable-permissions-blacklist -enabled ?

Security improvements Beta (most are available since 2012, so on my PC stable for at least two years)
#enable-site-per-process (which I always use with the flag below to for performance and resource) - disable?
#enable-top-document-isolation (puts all isolated iframes together in stead of each in its own) enabled ?
#disallow-doc-written-script-loads -enabled?
#enable-framebusting-needs-sameorigin-or-usergesture enabled ?
P.S.
Be more explicit

 

[SHvFl]

I enabled it just right now. Let's see what happens.

Tell me how it goes if you don't mind.