{"id":103781,"date":"2022-04-14T15:36:37","date_gmt":"2022-04-14T13:36:39","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/dostupen-web-brauzer-ceno-1-4-0-orientirovannyj-na-obhod-czenzury"},"modified":"2022-04-14T15:36:37","modified_gmt":"2022-04-14T13:36:39","slug":"dostupen-web-brauzer-ceno-1-4-0-orientirovannyj-na-obhod-czenzury","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/dostupen-web-brauzer-ceno-1-4-0-orientirovannyj-na-obhod-czenzury","title":{"rendered":"The CENO 1.4.0 web browser is now available, designed for bypassing censorship.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

eQualite has released the mobile web browser CENO 1.4.0, aimed at facilitating access to information under conditions of censorship, traffic filtering, or segments of the internet being disconnected from the global network. It is based on Firefox for Android (Mozilla Fennec). The functionality related to building a decentralized network has been moved to a separate library called Ouinet, which can be used to add tools for bypassing censorship to arbitrary applications. The project's developments are distributed under the MIT license. Ready builds are available on Google Play. <\/p>\n

The CENO browser and Ouinet library allow access to information in conditions of active proxy server blocking, VPN<\/a>, gateways, and other centralized mechanisms for bypassing traffic filtering, even in cases of complete internet shutdowns in censored areas (when content is fully blocked, it can be served from cache or local storage). A P2P network is created for data exchange, where users participate in redirecting traffic to external gateways (injectors) that provide access to information circumventing filters. <\/p>\n

The project also envisions caching content on each user's side while maintaining a decentralized cache of popular content. When a user opens a website, the loaded content is cached in the user's system and becomes available to P2P network participants who cannot access the resource directly or the gateways for bypassing the block. Each device only stores data that is directly requested from that device. The identification of cached pages is done using a hash of the URL, while all additional data related to the page, such as images, scripts, and styles, is grouped and provided together under a single identifier. <\/p>\n

To gain access to new content that is blocked from direct access, special proxy gateways (injector) are used, which are placed in external parts of the network that are not subject to censorship. Information between the client and the gateway is encrypted using public key encryption. Digital signatures are used to identify gateways and prevent the introduction of malicious gateways, while the keys of the project-supported gateways are included in the browser distribution. <\/p>\n

To access the gateway under conditions of its blocking, a chain connection through other users is supported, who act as proxies to route traffic to the gateway (data is encrypted with the gateway's key, which prevents transit users, through whose systems the request is transmitted, from intercepting the traffic or determining its content). Client systems do not send external requests on behalf of other users, but either return data from the cache or are used as a link to establish a tunnel to the proxy gateway.

\"The<\/center> <\/p>\n

CENO does not provide anonymity, and the information about the sent requests is accessible for analysis on the devices of participants (an attacker can obtain information about the data requested or served from the cache by other users, as well as determine that a user accessed a certain website by its hash). Initially, the browser attempts to deliver ordinary requests directly, and if a direct request fails, it performs a search in the distributed cache. If the URL is not in the cache, the information is requested through a connection to a proxy gateway or by accessing the gateway through another user. Confidential data, such as cookies, are not stored in the cache. <\/p>\n

For confidential requests, such as those requiring connection to personal accounts in email and social networks, it is recommended to use a separate private tab, where data is requested only directly or through a proxy gateway, but without accessing the cache and without being stored in the cache. <\/p>\n

Each system in a P2P network is assigned an internal identifier used for routing within the P2P network, but it is not tied to the physical location of the user. The integrity of the information transmitted and stored in the cache is ensured through the use of digital signatures (Ed25519). The transmitted traffic is encrypted using TLS. A distributed hash table (DHT) is used to access information about the network structure, participants, and cached content. When necessary, besides HTTP, \u00b5TP or Tor can also be used as transport.

\"The<\/center> <\/p>\n

Changes in the new release: <\/p>\n