So Firefox has tab sandbox isolation built in, but its cumbersome to use. When I started using waterfox they suggested a Mozilla add-on that made the feature more available. Have to go look at it, container something.

That being said, you can explicitly set URLs to sandbox groups, which is pretty handy when you want to keep cookies buy you don’t want them shared necessarily across sites.

Combined with noscript and ublock I have fine grain control of what I allow to run on sites and what cookies I’ll take.

So for sites I regularly visit I have it all preconfigured.

Then I just use a sandbox for random browsing.

Ticks all the boxes for me, without needing separate browsers for “everyday” tasks.

Been using duckduckgos browser. No idea how that stands up to iron fox, but it was a lot better than chrome or vanilla Firefox, which is what I was using before lol

Not familiar with this, but jumping on the opensnitch bandwagon. I use it, plus ufw, plus pihole.

Kill the DNS lookups, kill it at the network level of possible, and if it’s sneaky OpenSnitch catches it at the application layer.