Using forks of unsupported Firefox versions/features (this, Pale Moon, etc.) is a good way to introduce vulnerabilities into your daily browsing.
Firefox ESR should be the addons stopgap of choice while they’re ported.
Firefox ESR should be the addons stopgap of choice while they’re ported.
1. I don’t trust them to do that right
2. You’re later to get the same patches
3. You can’t backport patches for removed features
You’re also misrepresenting what “Defense in Depth” changelog entries in Pale Moon mean. For two of the five on the current page: CVE-2017-7809 was fixed by Firefox; NPAPI plugins aren’t supported anymore. The other three aren’t specific and don’t link to an issue tracker or patch, so it’s hard to say.
And no, I mean demonstrably wrong. But you are right that all the useless attack surfaces that Firefox has (ie, WebGl, Websockets, Pocket, etc) aren't in Pale Moon. Luckily for PM it doesn't need to do as well or better than Firefox because it simply doesn't have all the excess "features".
> 3. You can’t backport patches for removed features
which is just as obvious as 2 – and they are important.
Yeah. That's the point of forks.
That's just a plain extension they bundled...
I mean, you're entitled to your opinions, but these are pushing the envelope of silly.
Mozilla has shifted around and swapped out tons of code in Firefox since the official deprecation of XUL extensions. So, I imagine most XUL extensions will be broken by now just on that account.