Tor Browser Proxy Configuration wiki template settings discussion

Website
1

Continuing the discussion from Long Wiki Edits Thread:

Old version: Template:TorBrowser Proxy Configuration - Whonix

This process can be repeated with socks proxies, but it is redundant and does not provide any advantage over the former types. The reason is because only Tor Browser is modified and no other programs are being tunneled through it.

I don’t understand this.

Based on Cannot add SOCKS proxy to Tor Browser - #3 by motherhacker these instructions have been improved just now.

This process can be repeated with socks proxies, but it is redundant and does not provide any advantage over the former types. The reason is because only Tor Browser is modified and no other programs are being tunneled through it.

repeated

This implies setting HTTP + HTTPS + SOCKS proxy settings?

Would someone wanting to configure a HTTPS proxy leave HTTP settings empty?

That seems application specific and there could be leak bugs in Firefox depending on the configuration.

socks … does not provide any advantage over the former types.

Feature wise, clearly according to Comparison Tables socks4a and socks5 are better.

We already cover that in Proxy Warning somewhat but perhaps a clear recommendation (despite all the warnings beforehand on remote proxies generally) “use socks5” should be spelled out?

  • Apply the following steps to avoid unexpected results such as broken connectivity and/or traffic bypassing the tunnel-link and only going through Tor.

To avoid traffic bypassing the tunnel-link and only going through Tor… Wouldn’t it be best to trust Tor Browser’s default settings and make only minimal modifications?

Tor Browser’s default settings are…

network.proxy.socks file:///run/anon-ws-disable-stacked-tor/127.0.0.1_9150.sock
network.proxy.socks_port 0
network.proxy.socks_remote_dns true
network.proxy.socks_version 5

network.proxy.socks is modified in Whonix through use of an environment variable → anon-ws-disable-stacked-tor

From that perspective the most minimal change would be to use socks5 + modify network.proxy.socks + network.proxy.socks_port only.

Is

5. Set network.proxy.no_proxies_on to 0.

still required or would it still be required?

//cc @HulaHoop