Preserved pre-Australis Firefox UI and XUL extensions. Security concerns due to diverged codebase. Archive server compromise discovered in July 2019.
Pale Moon is a web browser built on the Unified XUL Platform (UXP), using the Goanna layout engine (forked from Mozilla's Gecko). It supports XUL/XPCOM-based extensions that Firefox dropped in 2017, runs in single-process mode, and maintains a classic browser interface. UXP is effectively a maintained fork of the Firefox 52-era platform, diverging further with each release.
Pale Moon is the browser equivalent of that one person at the party who insists vinyl sounds better — they're not entirely wrong, but the world has moved on and they haven't noticed. Created by M.C. Straver (known online as Moonchild) in 2009, Pale Moon started as an optimized rebuild of Firefox 3.5.2 with tweaked compiler settings for Windows. It was a performance project, not a philosophical one. That changed when Mozilla started redesigning Firefox.
The real divergence came with Mozilla's Australis redesign in Firefox 29 (2014), which replaced the classic Firefox interface with a Chrome-like design. Many longtime Firefox users hated it. Pale Moon doubled down on preserving the classic pre-Australis UI and continued supporting XUL/XPCOM extensions — the entire extension ecosystem that Firefox would kill off in 2017 with Firefox 57 (Quantum). This made Pale Moon a refuge for users who had built their browsing workflow around legacy extensions.
In 2017, Pale Moon moved to its own platform called UXP (Unified XUL Platform), forked from Firefox 52 ESR, with the Goanna rendering engine (forked from Gecko). This was the point of no return — Pale Moon was now maintaining its own browser engine, a Herculean task for what is essentially a one-developer project with some community help.
The security implications have been a persistent concern. Maintaining a browser engine fork with minimal resources means security patches from Mozilla don't automatically flow downstream. In 2019, this was dramatized when Pale Moon's archive server was hacked, with older installers infected with malware for months before discovery. While current releases weren't affected, it highlighted the fragility of the project's infrastructure.
Pale Moon remains a niche browser with a dedicated but small user base, essentially frozen in amber as a monument to what Firefox used to be. In 2021, the project announced a change of direction toward becoming more of its own thing rather than just 'old Firefox,' but the fundamental challenge remains: maintaining a browser engine is a billion-dollar endeavor, and Pale Moon does it on donations.
Pale Moon first released as optimized Firefox 3.5.2 rebuild
Mozilla releases Firefox 29 with Australis redesign; Pale Moon retains classic UI
Pale Moon begins using Goanna engine (Gecko fork)
Pale Moon moves to UXP (Unified XUL Platform), forked from Firefox 52 ESR
Firefox 57 Quantum drops XUL extensions; Pale Moon becomes last refuge for legacy addons
Archive server breach discovered; older installers had been infected with malware
Pale Moon announces change of direction, moving away from Firefox compatibility
Pale Moon continues as a niche browser with independent UXP development
Pale Moon preserved a browser paradigm that Mozilla actively chose to destroy — the classic Firefox interface and XUL extension ecosystem. For a small but passionate user base, it remained the only way to use browser workflows they'd built over a decade. Some legacy enterprise applications that depended on XUL-based browser plugins found Pale Moon to be their only option short of running ancient Firefox versions.
However, Pale Moon also became a cautionary tale about the limits of preservation-oriented forks. Maintaining a browser engine with minimal resources inevitably leads to security concerns, and the project has faced criticism from the security community. It demonstrates that sometimes the original project's direction (in this case, Firefox moving to WebExtensions and multi-process architecture) was driven by genuine technical necessity, not just whim.