3. For the first time, Samsung Internet Browser for Android is now passing nearly all State Partitioning tests. This means it's much harder for a web tracker to "tag" the browser to follow you around the web. (Now the only remaining tested browser on any platform that is still failing most State Partitioning tests is
DuckDuckGo browser for Android, although it is blocking third-party cookies, which is a good start!)
1. Safari Private Windows on Desktop are now protecting against leaks of users' screen size and window position, which can otherwise be used to fingerprint you as you browse the web with a number of other browsers:
I'm also testing desktop browsers' private windows. Here are the results:
Here are the test results for Desktop browsers! An ❌ indicates that the DNS request is being leaked unencrypted; a ✅ indicates that the DNS leak is prevented by encryption:
DoH is clearly a privacy improvement. While you do need to trust the DNS resolver, at least your browser isn't leaking the names of the websites you visit to any other parties listening on the line.
DNS is akin to the "Directory Assistance" or "Directory Inquiry" service (411 in the US and Canada). Since the old days, if you wanted to phone someone, and you didn't have their phone number, and they weren't in your phone book, you could call Directory Assistance and ask them to look up the phone number for you.
Next, our tests show that all Chromium-based browsers are providing HTTPS by Default. That means: whenever you visit a web page, the browser tries to use HTTPS and only falls back to HTTP if HTTPS is unavailable.
In addition, Safari Private Windows are blocking tracking query parameters and protecting users against the leak of their screen resolution and window position:
Browser Privacy Update (a thread)
In the latest version of http://PrivacyTests.org , we can see progress in privacy protections: Safari 17.2 has partitioned the Blob API, joining Brave and Firefox-based browsers. Now only Chrome and some Chrome-derived browsers are still leaking data through the Blob API:
Finally, on iOS we have seen excellent partitioning for a long time in all browsers: