Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Questions about using with TOR entry (image proxy, other connections) #593

Closed
TimmyBoi155 opened this issue Mar 3, 2023 · 3 comments
Closed

Comments

@TimmyBoi155
Copy link

TimmyBoi155 commented Mar 3, 2023

Want to say firstly thank you for this application. It's amazing. Even if proton comes out with a desktop client, i will likely keep using this one.

I want to use this over TOR. But I have a few questions about it:

  1. If I use the TOR API, how are images loaded through proton's image proxy? Do you merely use the clearnet URL but through the TOR network? or does proton have an onion based image proxy?
  2. If I have 2 accounts connecting over tor, can they be correlated to each other in any way that you are aware of? Locally-speaking. Also, does each TOR account have individual tor circuits?
  3. Are there any other connections that are made by the webclient besides these? and are they requested over TOR?

Thanks in advance

@TimmyBoi155
Copy link
Author

TimmyBoi155 commented Mar 3, 2023

Also, I'm currently having an issue, where, if I try to log in under the TOR API, the "Log In" button loads for 1 second, then stops loading, and nothing happens. It just stays at log in. However, it works fine under proton.me

My local tor socks5 proxy is started too

@vladimiry
Copy link
Owner

vladimiry commented Mar 14, 2023

Proton uses core/v4/images API call to load remote images. The address depends on the API entry point you selected in the app on the account edit form. There was an issue with API address resolving in recent app versions, but got fixed in v5.1.6.

Are there any other connections that are made by the webclient besides these? and are they requested over TOR?

I don't know, since I'm not the author of the webclient project, but enabling Block non "API entry point"-based network requests flag on the account edit form supposed to block non-API entry point based requests. The hcaptcha.com domain is kept in the whitelist.

If I have 2 accounts connecting over tor, can they be correlated to each other in any way that you are aware of? Locally-speaking. Also, does each TOR account have individual tor circuits?

There are many different techniques, so I guess if you got targeted for some reason, they might find a way to mark you as a user of multiple accounts.

I'm currently having an issue, where, if I try to log in under the TOR API, the "Log In" button loads for 1 second, then stops loading, and nothing happens.

It worked before, so apparently proton changed something at the backend side (like for example API subdomain use schemes). So I put it as an upstream backend-related breaking change.

@vladimiry
Copy link
Owner

I'm currently having an issue, where, if I try to log in under the TOR API, the "Log In" button loads for 1 second, then stops loading, and nothing happens.

Just tested it and it works. So I guess you missed specifying the socks5://localhost:9050 proxy address for the account (or other address if you have changed the defaults), see #113 (comment).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants