Privoxy and Java

[Fabian Keil]

Dave Jevans <djevans at ironkey.com> wrote:

> Privoxy routes DNS through TOR.

Like most HTTP proxies, Privoxy doesn't route any DNS requests.

It either relies on the operating system to do the DNS resolution,
or in the case of socks4a connections, just passes the hostname
to the socks proxy.

Privoxy doesn't pass the resolved IP address to the client
(except for some error messages), and in the socks4a case
doesn't even know the address itself.

> Question: does Java in a browser run through the browser's IP stack? 

How many browsers come with their own IP stack?

> If so, its DNS packets would go through the SOCKS proxy and Privoxy, 
> then TOR.  Right?

If the Java application does it's own DNS lookups, it will most
likely bypass the browser. To use Privoxy for the DNS lookups
the Java application would have to tunnel DNS through HTTP,
and I doubt that that's commonly done. I wouldn't know, though,
as I don't use Java.

If the Java application only uses HTTP, there is a chance that
it honours the browser's proxy settings and doesn't cause
any DNS leaks, but that's not guaranteed.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20070307/74fb4a22/attachment.pgp>