Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Investigate warning about Uncloak canonical name uBlock Origin setting #228

Open
ruihildt opened this issue Jul 30, 2024 · 0 comments
Open
Labels
idea privacy This will improve privacy. proxy This is related to the socks proxy feature

Comments

@ruihildt
Copy link
Member

Enabling Uncloak canonical names in uBO will create a "mild" DNS leak: the Mullvad VPN server you're connected to will appear when connecting through proxy.

This is because webextension are not aware of each other, so uBO will not "know" every connection should be proxied, and when uBO will try to resolve a domain to check if this is in fact a tracking one, this will be done outside of the proxy but still inside of the Mullvad VPN tunnel.

To avoid this leak, and unless Firefox fixes the reported bug, the only option is to disable this uBO option.

While extensions are not aware of each other, with the correct permission, it is possible to list installed extensions. This is how we can recommend uBO when not installed.

So a possibility would be to recommend disabling Uncloak canonical names when a proxy is in use.
Unfortunately, it will not be possible to check whether the option is enabled or disabled, so it would need to be a "passive" recommendation the user should be able to dismiss.

@ruihildt ruihildt added privacy This will improve privacy. proxy This is related to the socks proxy feature idea labels Jul 30, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
idea privacy This will improve privacy. proxy This is related to the socks proxy feature
Projects
Development

No branches or pull requests

1 participant