Closed nodiscc closed 1 year ago
I think we can wait for ghacks-user.js changes to settle a bit before working on this.
It would be nice to have some kind of "how to verify all this works" section that maps most settings/mitigations to test sites that you can use to verify that the controls are working as expected.
Some of these tests point at the IP address + DNS Address:
If you are now connected to a VPN and you see your ISP IP, then your system is leaking.
They focus on Anonimity and are listed under 2. Multiple Tests (except ZScaler that focuses on Threat Prevention | Access Control | Data Protection on enterprise).
Uniqueness and Entropy is the interest of 1. Fingerprinting tests.
Some URLs under 4. Encryption are for specific issues, not always related to a browser, as Heartbleed (redundant?)
I think 5. does no sense, it's an internal list of pages from Mozilla. 6. are even more specific tests.
Maybe a short explanation about some of these URLs may be useful. It's a long list and could be cut into 2 groups, with a few essentials as https://html5sec.org/ and https://badssl.com/ followed by 2. Multiple Tests and 6. (explained).
I'm no longer working on this.
[TEST]
fields in https://github.com/ghacksuserjs/ghacks-user.js/blob/master/user.js