4 ms·

Yes, it's an https proxy. And DNS queries are not leaked. Again since it's a HTTPS proxy your traffic is hard to inspect/intercept/MITM. Earlier discussion http

by betaby 11y ago

Yes, it's an https proxy. And DNS queries are not leaked. Again since it's a HTTPS proxy your traffic is hard to inspect/intercept/MITM. Earlier discussion https://news.ycombinator.com/item?id=11540389 https://news.ycombinator.com/item?id=11540389

danielparks 11y ago
> DNS queries are not leaked. I imagine that you mean the proxy takes care of resolving hosts. For example, requesting https://google.com https://google.com doesn't resolve google.com. on the client, rather it sends a request for https://google.com https://google.com to the proxy server and the proxy server resolves google.com. Attacking the DNS lookup for the proxy itself won't work because the attacker would need the SSL certificate for the proxy. Hopefully Opera has pinned that certificate (or better, its signer), which prevents a rogue CA attack.
tyingq 11y ago
It does leak via WebRTC unless you install a 3rd party plugin and configure it a specific way.
- betaby 11y ago
  I don't know how reliably to test WebRCT thus can't comment on that particular case. For http/https DNS queries are not leaked.
  - tyingq 11y ago
    There's a pretty good demo, with links to source code, here: https://diafygi.github.io/webrtc-ips/ https://diafygi.github.io/webrtc-ips/