Waterfox

Name: Waterfox
Author: BrowserWorks

by BrowserWorks · MPL-2.0

Fast and Private Web Browser

Record

These URLs are the ones BrowserWorks declares in its own manifest. We do not proxy or shorten them, and we do not host a copy.

exemachine scopecdn.waterfox.com · publisher-owned

Run this against the file on disk. If the output does not match the hash below, the file is not what BrowserWorks published. Delete it.

Windows · PowerShell

Get-FileHash "Waterfox Setup 6.6.17.exe" -Algorithm SHA256

macOS · Linux

shasum -a 256 "Waterfox Setup 6.6.17.exe"

Expected output

f59df2fd152afd476ad941a886a61878fec17b70d224197b229230a12e50c468

Version on Homebrew: 6.6.17
Download URL: https://cdn1.waterfox.net/waterfox/releases/6.6.17/Darwin_x86_64-aarch64/Waterfox%206.6.17.dmg
SHA-256: befa28b2bce215befcc31a59144fd558c94bcc424adada26b53b2a11ba4ff8f2
Install with Homebrew: brew install --cask waterfox

Signal	Finding	Points
SHA-256 hash published	1 of 1 installers ship a SHA-256 hashWithout a published hash there is no way to prove the file you downloaded is the file the publisher built.	30 / 30
Binary provenance	1 on a domain owned by the publisherThe strongest signal against a repackaged installer: the file should come from the publisher, not from a mirror nobody vouches for.	35 / 35
Served over HTTPS	1 of 1 over HTTPSAn installer fetched over plain HTTP can be modified in transit.	15 / 15
Release recency	last release about 0 months agoSoftware that has not shipped in years accumulates unpatched vulnerabilities.	15 / 15
Licence declared	MPL-2.0A declared licence tells you what you are actually allowed to do with the software.	5 / 5

Extensions Waterfox registers itself to handle.

Every version with a published manifest, newest first. Useful when you need an older build for compatibility.

Windows manifest: github.com/microsoft/winget-pkgs/tree/master/manifests/w/Waterfox/Waterfox/6.6.17
macOS cask: formulae.brew.sh/cask/waterfox