censorship-no / ceno-browser-archive Goto Github PK

First of all, thank you very much for providing direct APK download links on your website, that's already much more than most other developers do.
Installing an application manually, however, means that the user has to take care about updates for every single app themselves.
There's a comfortable solution called SkyDroid that should fit pretty good to your own plans with Ceno.
It's a decentralized appstore where every developer hosts the APKs on an own server (or GitHub releases or anywhere else) and points to that file using a DNS record.
Unfortunately it's not that popular or well-known yet, but it's easy to publish apps there and it works really good.
You may want to check it out: https://skydroid.app

Thanks for the discussion over at the IRTF today! In the discussion, some questions came up about how the user of the ceno browser can ensure the authenticity of data that they retrieve.

Most of the modern web is distributed via https, which provides a transport security model, so that clients can be assured that they're talking to the expected origin. but once the data is transferred, it doesn't have any clear indication that it came from the specific origin. This seems like it represents an opportunity for bad actors to inject arbitrary content that claims to be from a given origin.

@npdoty observed that the Signed Exchanges work offers some potential guarantees about content authenticity.

Fennec is a very old build of Firefox for Android. Using a Fennec base may cause potential security vulnerabilities.

Have the developers taken any action against it?

I just tried Ceno and was shocked to see that it actually uses Google as default search engine, which is the worst possible option for privacy reasons.
It's a shame that upstream Firefox has to make this choice because they depend on Googles money, but as Ceno likely doesn't receive any money from Google, could you please set any more privacy-respecting alternative as default?
I'm personally quite happy with https://metager.de but probably it's too focused on the German-speaking countries.
Other popular and (more or less) trustworthy solutions are https://swisscows.com , https://search.brave.com or https://duckduckgo.com

After Heartbleed event, the OpenSSL project lost credibility in relation to code security measures (memory-safety).

Forks were created and LibreSSL/BoringSSL came, with better code security measures.

LibreSSL use the same APIs of OpenSSL, rebase with mainstream OpenSSL and clean obsolete code/ciphers/algorithms.

any plans in ceno/ouinet client for windows builds ?
i mean, with no browser, but just a full proxy ceno/ouinet app ?

Please publish this on f-droid. thanks

刚启动时就点击网页，可能出现代理服务器拒绝连接。或者，打开了CENO扩展后，过一阵子，扩展界面变成灰色，其他网页也会出现代理服务器拒绝连接。
新版浏览器甚至更难打开常用网站，基本不可用。
与旧版一样，打开过的网页再打开，也经常不能。后退，也经常不能。这个问题，采用开启本地超级缓存，或者返回不重载的技术，就能解决。前面一个问题也应该可以解决，离线访问打开过的网页的功能，chrome自带。

Greetings.

I see you have the android project in here. But do you have any plans on porting the code and making it work on normal desktop gnu+linux distro? Thanks.

Please add this to the iOS AppStore!