-
Notifications
You must be signed in to change notification settings - Fork 82
Privacy matters: Hidden remote connections
HTTP Switchboard uses the chrome.webRequest API to filter/report net requests. However, anything which is not passed to the above API by your Chromium-based browser can not be filtered/reported by HTTPSB.
These requests are not merely behind-the-scene (which are reported by HTTPSB), they are also unavailable to extensions, which means it is even more difficult for a user to be aware of these. So here are lists of all the connections which have been found to be hidden from user view, i.e. which can not be reported as behind-the-scene requests by HTTPSB, and therefore can not be filtered through HTTPSB.
The remote connections were collated after having disabled everything which can be reasonably disabled by a user in order to prevent as much those hidden remote connections. Only the about:blank page was opened after browser was launched, and only HTTPSB extension installed locally was present.
At start, and then regularly:
[gibberish].1e100.net # seems to correspond to "clients[?].google.com"
At start, if "Settings/Languages/Offer to translate pages that..." is enabled:
translate.googleapis.com
When visiting the "Settings" page, regardless of whether "Settings/Languages/Offer to translate pages that..." is enabled or disabled:
translate.googleapis.com
At start, and then regularly:
[gibberish].1e100.net # seems to correspond to "clients[?].google.com"
At start, if "Settings/Languages/Offer to translate pages that aren't in a language that I read" is enabled:
translate.googleapis.com
When visiting the "Settings" page, regardless of whether "Settings/Languages/Offer to translate pages that..." is enabled or disabled:
translate.googleapis.com
At start:
autoupdate.geo.opera.com
Sometimes at start (related to "Settings/Start page/Preload Discover contents"?):
[gibberish].jfk1.r.cloudfront.net:49504
Sometimes at start but less often, seemingly related to "Settings/Search/Manage search engines...":
[gibberish].1e100.net # google.com
origin.any.bing.com
205.251.242.54 # amazon.com
[gibberish].yahoo.com