[Bug-gnuzilla] Tor Browser Button does not proxy DNS requests

[Mike Gerwitz]

Someone mentioned on help-guix@ that the Tor Browser Button didn't allow
accessing onion services.  I enabled the Addon out of concern for what
that implied and, sure enough, it seems that DNS requests are not
proxied through Tor.  The easiest way for me to verify that was to
attempt to visit a non-existing domain: I was redirected to a page
hosted by my ISP.

This is very dangerous, as leaking DNS requests to one's ISP and anyone
else that may be listening could reveal potentially very sensitive
information, and could be used to deanonymize users.  So I recommend
that Tor Browser Button not be distributed with Icecat.

I've used FoxyProxy Standard for many years and it has an option to
proxy DNS requests (and does so by default IIRC), so users may use
that.  I haven't researched other options.

-- 
Mike Gerwitz
Free Software Hacker+Activist | GNU Maintainer & Volunteer
GPG: D6E9 B930 028A 6C38 F43B  2388 FEF6 3574 5E6F 6D05
https://mikegerwitz.com

signature.asc
Description: PGP signature