{"id":2743,"date":"2021-05-18T08:47:25","date_gmt":"2021-05-18T15:47:25","guid":{"rendered":"https:\/\/blog.mozilla.org\/security\/?p=2743"},"modified":"2021-05-18T10:00:17","modified_gmt":"2021-05-18T17:00:17","slug":"introducing-site-isolation-in-firefox","status":"publish","type":"post","link":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/","title":{"rendered":"Introducing Site Isolation in Firefox"},"content":{"rendered":"

When two major vulnerabilities known as Meltdown<\/a> and Spectre<\/a> were disclosed by security researchers in early 2018, Firefox promptly added security mitigations<\/a> to keep you safe. Going forward, however, it was clear that with the evolving techniques of malicious actors on the web, we needed to redesign Firefox to mitigate future variations of such vulnerabilities and to keep you safe when browsing the web!<\/p>\n

We are excited to announce that Firefox\u2019s new Site Isolation architecture is coming together. This fundamental redesign of Firefox\u2019s Security architecture extends current security mechanisms by creating operating system process-level boundaries for all sites loaded in Firefox for Desktop. Isolating each site into a separate operating system process makes it even harder for malicious sites to read another site\u2019s secret or private data.<\/p>\n

We are currently finalizing Firefox\u2019s Site Isolation feature by allowing a subset of users to benefit from this new security architecture on our Nightly and Beta channels and plan a roll out to more of our users later this year. If you are as excited about it as we are and would like to try it out, follow these steps:<\/p>\n

To enable Site Isolation on Firefox Nightly:<\/b><\/p>\n

    \n
  1. Navigate to about:preferences#experimental<\/li>\n
  2. Check the “Fission (Site Isolation)” checkbox to enable.<\/li>\n
  3. Restart Firefox.<\/li>\n<\/ol>\n

    To enable Site Isolation on Firefox Beta or Release:<\/b><\/p>\n

      \n
    1. Navigate to about:config.<\/li>\n
    2. Set `fission.autostart` pref to `true`.<\/li>\n
    3. Restart Firefox.<\/li>\n<\/ol>\n

      With this monumental change of secure browser design, users of Firefox Desktop benefit from protections against future variants of Spectre, resulting in an even safer browsing experience. If you aren\u2019t a Firefox user yet, you can download the latest version here<\/a> and if you want to know all the technical details about Firefox\u2019s new security architecture, you can read it here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

      When two major vulnerabilities known as Meltdown and Spectre were disclosed by security researchers in early 2018, Firefox promptly added security mitigations to keep you safe. Going forward, however, it … Read more<\/a><\/p>\n","protected":false},"author":1832,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[47,30,69],"tags":[45513,45514],"coauthors":[462254,465586],"yoast_head":"\nIntroducing Site Isolation in Firefox - Mozilla Security Blog<\/title>\n<meta name=\"description\" content=\"With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Anny Gakhokidze, Neha Kochar\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/\",\"url\":\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/\",\"name\":\"Introducing Site Isolation in Firefox - Mozilla Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\"},\"datePublished\":\"2021-05-18T15:47:25+00:00\",\"dateModified\":\"2021-05-18T17:00:17+00:00\",\"author\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/37e992440007aa8917b8f40ba5d6925d\"},\"description\":\"With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.\",\"breadcrumb\":{\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/blog.mozilla.org\/security\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Introducing Site Isolation in Firefox\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#website\",\"url\":\"https:\/\/blog.mozilla.org\/security\/\",\"name\":\"Mozilla Security Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/37e992440007aa8917b8f40ba5d6925d\",\"name\":\"Anny Gakhokidze\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/20eb3c072411478887425b2b9d6699e4\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/6986b223296d7f416446b381b008004b?s=96&d=identicon&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/6986b223296d7f416446b381b008004b?s=96&d=identicon&r=g\",\"caption\":\"Anny Gakhokidze\"},\"description\":\"Senior Platform Engineer who works on Firefox's Site Isolation and DOM-related features.\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Introducing Site Isolation in Firefox - Mozilla Security Blog","description":"With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/","twitter_misc":{"Written by":"Anny Gakhokidze, Neha Kochar","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/","url":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/","name":"Introducing Site Isolation in Firefox - Mozilla Security Blog","isPartOf":{"@id":"https:\/\/blog.mozilla.org\/security\/#website"},"datePublished":"2021-05-18T15:47:25+00:00","dateModified":"2021-05-18T17:00:17+00:00","author":{"@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/37e992440007aa8917b8f40ba5d6925d"},"description":"With Site Isolation enabled on Firefox for Desktop, Mozilla takes its security guarantees to the next level.","breadcrumb":{"@id":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/blog.mozilla.org\/security\/2021\/05\/18\/introducing-site-isolation-in-firefox\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/blog.mozilla.org\/security\/"},{"@type":"ListItem","position":2,"name":"Introducing Site Isolation in Firefox"}]},{"@type":"WebSite","@id":"https:\/\/blog.mozilla.org\/security\/#website","url":"https:\/\/blog.mozilla.org\/security\/","name":"Mozilla Security Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/blog.mozilla.org\/security\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/37e992440007aa8917b8f40ba5d6925d","name":"Anny Gakhokidze","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/blog.mozilla.org\/security\/#\/schema\/person\/image\/20eb3c072411478887425b2b9d6699e4","url":"https:\/\/secure.gravatar.com\/avatar\/6986b223296d7f416446b381b008004b?s=96&d=identicon&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/6986b223296d7f416446b381b008004b?s=96&d=identicon&r=g","caption":"Anny Gakhokidze"},"description":"Senior Platform Engineer who works on Firefox's Site Isolation and DOM-related features."}]}},"_links":{"self":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2743"}],"collection":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/users\/1832"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/comments?post=2743"}],"version-history":[{"count":0,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/posts\/2743\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/media?parent=2743"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/categories?post=2743"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/tags?post=2743"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/blog.mozilla.org\/security\/wp-json\/wp\/v2\/coauthors?post=2743"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}