3 ms·
Well, this post makes some claims that are either false or at least extremely misleading. > QUIC runs on top of the UDP protocol. The Chrome webRequest API doe
by comex 10y ago
Well, this post makes some claims that are either false or at least extremely misleading.
> QUIC runs on top of the UDP protocol. The Chrome webRequest API does not have permission to access the udp:// scheme, therefore extensions that rely on webRequest to block ad and tracking requests cannot see QUIC requests. There is no other API available to extensions that can detect and block QUIC.
QUIC requests are not logged as using the udp:// scheme. They're regular https:// https:// URLs; QUIC vs. TCP is a lower-level decision.
Since the explanation didn't make sense, I decided to test whether the claim was true, i.e. the webRequest API cannot see QUIC requests. I randomly searched the extension store for something that could log all requests, and found this weird extension:
https://chrome.google.com/webstore/detail/my-webrequest/ojodgdaaholkmelbddlhnfdgamohijhk/related?hl=en https://chrome.google.com/webstore/detail/my-webrequest/ojod...
I went to www.google.com, and the dev tools showed that all requests were being made over QUIC; the extension dutifully logged a bunch of requests with request headers, etc. (To https: URLs.)
So unless something changed recently, either the author is wrong, or they meant that extensions can't detect /the fact that QUIC is being used/, as opposed to being unable to detect the requests at all. But I don't think that interpretation makes much sense - why would "extensions that rely on webRequest to block ad and tracking requests" care about whether QUIC is being used?
On the other hand, that's the only possible interpretation for this other claim:
> QUIC requests are currently not visible in the Network tab of Chrome Developer Tools, with default Network settings. The user is required to right click and select the Protocol menu option in order to view.
All that right clicking and selecting Protocol does is toggle the Protocol column in the list of requests. It doesn't show or hide any requests. Surely the author knows that if they tried the option in question, so I guess they must have meant, again, that /whether a request is QUIC/ is "not visible". Unless you press the button to make it visible. I don't really see why the author has a problem with that, since for most purposes it doesn't matter, and it's easy to enable. And again, the wording makes it sound like something a lot worse.
This really makes me question the technical competence of the Brave team...