uazo commented 1 year ago

extremely complex request, but at least I want to elaborate on it.

possible alternatives:

take advantage of our proxy-related patch + a service such as https://thesocialproxy.com or https://brightdata.com or https://oxylabs.io (all very expensive!), I don't want a vpn software to install, I couldn't use it in the office. tor is not an alternative, unfortunately, we would be too exposed
use oblivious http, but we would miss the infrastructure partner
?? think of alternatives

links:

https://source.chromium.org/chromium/chromium/src/+/03859909b0fa7ac34affd11e170710a15aa40d6e

uazo commented 1 year ago

About ohttp it seems that the client code is present: https://source.chromium.org/chromium/chromium/src/+/refs/heads/main:components/safe_browsing/core/browser/hashprefix_realtime/ohttp_key_service.cc;l=234;drc=b0f57b7e98590319f0f0786d00e683299b4e96f9

some repo about server and relay: https://github.com/cloudflare/privacy-gateway-server-go https://github.com/cloudflare/privacy-gateway-relay https://github.com/chris-wood/ohttp-js

some findings: https://blog.cloudflare.com/oblivious-dns/ https://www.01net.it/google-selects-fastly-oblivious-http-relay-for-privacy-sandbox-initiative-to-enhance-online-privacy-for-billions-of-chrome-users/

uazo commented 1 year ago

@Universalizer I saw that you are interested in masking the IP. do you want to give me a hand? shall we try? but I make no promises... it's just an attempt.

https://github.com/cloudflare/privacy-gateway-server-go https://github.com/cloudflare/privacy-gateway-relay

try to understand how it works and set up a test infrastructure. ohttp is already integrated in chromium and I think it is working, but there is no infrastructure. the idea is to test if it is possible to use that protocol for all communication done by the browser (attention not blink, but the browser).

Universalizer commented 1 year ago

Myself, Trying to understand

Universalizer commented 1 year ago

https://github.com/DNSCrypt/dnscrypt-resolvers/blob/cf4421044283813e31d26b6ccc8f02759b993f33/v3/onion-services.md

https://github.com/DNSCrypt/dnscrypt-resolvers/tree/cf4421044283813e31d26b6ccc8f02759b993f33/v3

Universalizer commented 1 year ago

Anonymized DNS relays

https://github.com/DNSCrypt/dnscrypt-resolvers/blob/1d35de0dc4423c4a1293c78ec0edf0728d3f7f4c/v2/relays.md

Anonymized DNS is a lightweight alternative to Tor and SOCKS proxies, dedicated to DNS traffic. They hide the client IP address to DNS resolvers, providing anonymity in addition to confidentiality and integrity.

DNS Anonymization is only compatible with servers supporting the DNSCrypt protocol.

See the link below for more information:

https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Anonymized-DNS

uazo commented 1 year ago

Issue 1420764: Use finch to set proxy configuration for IP protection experiments https://bugs.chromium.org/p/chromium/issues/detail?id=1420764 kMaskedDomainList https://developer.chrome.com/docs/privacy-sandbox/ip-protection/

also kHashRealTimeOverOhttp and kMaskedDomainList

Universalizer commented 1 year ago

https://github.com/square/okhttp same and relating or different.

uazo commented 11 months ago

https://chromium-review.googlesource.com/q/hashtag:%22afp%22 https://chromium-review.googlesource.com/q/hashtag:%22mdl%22

Universalizer commented 5 months ago

https://github.com/Gedsh/InviZible/commit/2f3a150884067932c29636c290f8f082407a0278, if you might be having interest in ODoH (ODoH servers support).