4 ms·

> No need to install a separate VPN app. Once you sign up for Privacy Pro, you can install our VPN right in your DuckDuckGo browser > we use the open-source Wi

by Elbrus 2y ago

> No need to install a separate VPN app. Once you sign up for Privacy Pro, you can install our VPN right in your DuckDuckGo browser > we use the open-source WireGuard protocol Any info on how that is implemented? Did they build some plug-in, where a user can enter VPN details/credentials? Asking since I'd love to have something, where I can add my own self-hosted VPN details to have browser only (not the whole machine) connected through VPN.

webstrand 2y ago
Most likely SOCKS5? At least in Firefox there's builtin UI for configuring it separately from OS. Chromium is more annoying and needs command line flags. They claim to use wireguard, which might be something a browser extension can start on-demand?
- Elbrus 2y ago
  > Most likely SOCKS5? AFAIK, there's still no proper SOCKS user authorization. So if I do something like that on my own VPS, I'll quickly have like 10 000 open connections from Pakistan there. > At least in Firefox there's builtin UI for configuring it separately from OS Yes, also extensions like FoxyProxy. SOCKS4/5 configuration in Firefox is a pure joy. Adding a Putty tunnel there is probably the only simple way to achieve what I described in the comment above.
  - 4ndrewl 2y ago
    tunnel it over ssh?
    - Elbrus 2y ago
      Yes, Connection -> SSH -> Tunnels in Putty connection options. Add a dynamic tunnel there. Start the session. Then enter 127.0.0.1 and the port you've chosen as a SOCKS v5 proxy in Firefox options. Congratulations! Your poor man's VPN is ready :)
csande17 2y ago
The article links to some help pages which clarify that, although you need the browser to connect to the VPN, once connected it applies globally to the whole machine (https://duckduckgo.com/duckduckgo-help-pages/privacy-pro/vpn/what-is-vpn/ https://duckduckgo.com/duckduckgo-help-pages/privacy-pro/vpn...). So if you'll pardon my pun, I think they've probably just duck-taped a standard VPN client app into their browser app.
- Elbrus 2y ago
  > So if you'll pardon my pun, I think they've probably just duck-taped a standard VPN client app into their browser app If it's true, then I'll only double the pun. But that's why I'm also curious about the "No need to install a separate VPN app" part. Never tried WIreGuard in Windows, but AFAIK it tries to mean serious business, "no connection runs past". So there should be things similar to WinPcap or something like that under the hood. And they're unlikely to work without installation. Moreover, quite likely require a reboot after the install. But I could be wrong.

by Elbrus 2y ago

webstrand 2y ago

Most likely SOCKS5? At least in Firefox there's builtin UI for configuring it separately from OS. Chromium is more annoying and needs command line flags. They claim to use wireguard, which might be something a browser extension can start on-demand?

Elbrus 2y ago
> Most likely SOCKS5? AFAIK, there's still no proper SOCKS user authorization. So if I do something like that on my own VPS, I'll quickly have like 10 000 open connections from Pakistan there. > At least in Firefox there's builtin UI for configuring it separately from OS Yes, also extensions like FoxyProxy. SOCKS4/5 configuration in Firefox is a pure joy. Adding a Putty tunnel there is probably the only simple way to achieve what I described in the comment above.
- 4ndrewl 2y ago
  tunnel it over ssh?
  - Elbrus 2y ago
    Yes, Connection -> SSH -> Tunnels in Putty connection options. Add a dynamic tunnel there. Start the session. Then enter 127.0.0.1 and the port you've chosen as a SOCKS v5 proxy in Firefox options. Congratulations! Your poor man's VPN is ready :)

csande17 2y ago

The article links to some help pages which clarify that, although you need the browser to connect to the VPN, once connected it applies globally to the whole machine (https://duckduckgo.com/duckduckgo-help-pages/privacy-pro/vpn/what-is-vpn/ https://duckduckgo.com/duckduckgo-help-pages/privacy-pro/vpn...). So if you'll pardon my pun, I think they've probably just duck-taped a standard VPN client app into their browser app.

Elbrus 2y ago
> So if you'll pardon my pun, I think they've probably just duck-taped a standard VPN client app into their browser app If it's true, then I'll only double the pun. But that's why I'm also curious about the "No need to install a separate VPN app" part. Never tried WIreGuard in Windows, but AFAIK it tries to mean serious business, "no connection runs past". So there should be things similar to WinPcap or something like that under the hood. And they're unlikely to work without installation. Moreover, quite likely require a reboot after the install. But I could be wrong.