Skip to content

docs: add Trivalent section to features page - #417

Open
Ganwtrs wants to merge 3 commits into
secureblue:livefrom
Ganwtrs:patch-9
Open

Ganwtrs wants to merge 3 commits into
secureblue:livefrom
Ganwtrs:patch-9

Conversation

@Ganwtrs

@Ganwtrs Ganwtrs commented Sep 26, 2026 •

Copy link
Copy Markdown
Contributor

Closes #95

I just took most of the information from GrapheneOS’s Vanadium section and @RKNF404 ’s Trivalent section

I definitely got some info wrong, but I just took the features from GrapheneOS’s section and took away

Details - Hardware memory tagging (MTE) enabled for the main allocator
  • Native Android autofill implementation to avoid needing sandboxed Google Play for autofill support
  • Native Android credential manager support for passkeys to avoid needing sandboxed Google Play for passkey support
  • Standard Android 16 user agent reduction is enabled early for the WebView to replace the major OS version, device model and browser minor/build/patch version with standard placeholder values
  • Battery API always shows the battery as charging and at 100% capacity
  • Consistent browser behavior across users without usage of feature flags and seed-based trials
  • Nearly all remote services disabled by default or removed. Only connects to GrapheneOS servers by default. There are only 2 default services: component updates such as certificate authority and certificate revocation updates and DNS-over-HTTPS connectivity checks when enabled
  • Web search and global search intents to replace the need for an OS search app
  • Option to always open links from other apps, custom tabs, search intents and share intents in Incognito mode
  • Option to reduce or disable sending cross-origin referrer information sharing where a link was opened
  • Hybrid post-quantum cryptography enabled by default to match the behavior of Chromium on desktop since the devices we support are more than fast enough
  • Bookmark export and import

@codacy-production

codacy-production Bot commented Sep 26, 2026 •

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

Comment thread content/FEATURES.md Outdated
Comment thread content/FEATURES.md Outdated
Comment thread content/FEATURES.md Outdated
Comment thread content/FEATURES.md Outdated
Comment thread content/FEATURES.md Outdated
Comment thread content/FEATURES.md
Comment thread content/FEATURES.md
{: #exploit-mitigation}

- Install and enable [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally, including for Flatpaks.
- Install [Trivalent](https://github.com/secureblue/Trivalent), our security-focused, Chromium-based browser inspired by [Vanadium](https://github.com/GrapheneOS/Vanadium). <sup>[Why Chromium-based?](https://grapheneos.org/usage#web-browsing)</sup> <sup>[Why not a Flatpak?](https://forum.vivaldi.net/post/669805)</sup>

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Trivalent is already included here, as well as selinux confinement. I'm not sure why a separate section is needed?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

#95 (comment) It’s like GrapheneOS’s Vanadium section, and you said

yeah we should probably have that somewhere

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah we need it somewhere and I did say maybe a subsection of features, that page is rather concise though and it'd be nice to keep it that way and instead put together a comprehensive article about Trivalent and link to it

Comment thread content/FEATURES.md
- Install and enable [hardened_malloc](https://github.com/GrapheneOS/hardened_malloc) globally, including for Flatpaks.
- Install [Trivalent](https://github.com/secureblue/Trivalent), our security-focused, Chromium-based browser inspired by [Vanadium](https://github.com/GrapheneOS/Vanadium). <sup>[Why Chromium-based?](https://grapheneos.org/usage#web-browsing)</sup> <sup>[Why not a Flatpak?](https://forum.vivaldi.net/post/669805)</sup>
- SELinux [confinement](https://github.com/secureblue/Trivalent/blob/live/selinux/trivalent.te) for Trivalent.
- Kernel hardening via sysctl. <sup>[details](https://github.com/secureblue/secureblue/blob/live/files/system/usr/lib/sysctl.d/55-hardening.conf)</sup>

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

If anything, this section needs to be updated, since we build our own kernels now

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think a separate PR would be more appropriate for that, but I’ll see if I can work on it

Comment thread content/FEATURES.md Outdated
…ore technical features, Google Chrome as standard Chromium

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Mention Trivalent in homepage and feature page

3 participants