{"id":104654,"date":"2022-07-15T09:36:49","date_gmt":"2022-07-15T07:36:52","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novosti-interneta\/vypusk-tor-browser-11-5"},"modified":"2022-07-15T09:36:49","modified_gmt":"2022-07-15T07:36:52","slug":"vypusk-tor-browser-11-5","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-tor-browser-11-5","title":{"rendered":"Release of Tor Browser 11.5","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"
After 8 months of development, a significant release of the specialized browser Tor Browser 11.5 has been introduced, continuing the functionality development based on the Firefox 91 ESR branch. The browser focuses on ensuring anonymity, security, and privacy, as all traffic is redirected solely through the Tor network. Direct access through the current system's standard network connection is impossible, which prevents tracking the user's real IP (in case the browser is compromised, attackers may access system network parameters, so to completely block potential leaks, products like Whonix should be used). Tor Browser builds are prepared for Linux, Windows, and macOS. <\/p>\n
To provide additional protection, Tor Browser includes the HTTPS Everywhere extension, allowing encryption of traffic on all sites where possible. To mitigate threats from JavaScript-based attacks and to block plugins by default, the NoScript extension is included. To combat traffic blocking and inspection, fteproxy and obfs4proxy are utilized. <\/p>\n
To establish an encrypted communication channel in environments that block any traffic other than HTTP, alternative transports are offered, which allow, for example, bypassing attempts to block Tor in China. To protect against tracking user movement and to avoid exposing characteristics specific to individual visitors, APIs such as WebGL, WebGL2, WebAudio, Social, SpeechSynthesis, Touch, AudioContext, HTMLMediaElement, Mediastream, Canvas, SharedWorker, WebAudio, Permissions, MediaDevices.enumerateDevices, and screen.orientation are disabled or limited, along with telemetry sending tools, Pocket, Reader View, HTTP Alternative-Services, MozTCPSocket, 'link rel=preconnect', and a modified libmdns. <\/p>\n
In the new version: <\/p>\n
\n
A Connection Assist interface has been added to automate the setup of circumventing access blocks to the Tor network. Previously, in case of traffic censorship, users had to manually obtain and activate bridge nodes in the settings. In the new version, circumvention of blocks is set up automatically, without manual adjustment of settings \u2014 in case of connection issues, the specific blocking characteristics in different countries are considered, and the optimal method of bypassing them is selected. Depending on the user's location, a prepared set of settings suitable for their country is downloaded, a functioning alternative transport is chosen, and a connection through bridge nodes is organized.\n
The moat toolkit is used to download the list of bridge nodes, implementing the technique of \"domain fronting,\" which involves HTTPS requests with a fictitious host specified in the SNI and the actual name of the requested host transmitted in the HTTP Host header within the TLS session (for example, content delivery networks can be used to bypass blocks).
<\/center> <\/p>\n
The design of the section in the configurator for the Tor network settings has been updated. The changes aim to simplify the manual configuration process for bypassing blocks in the configurator, which may be necessary in case of issues with automatic connection. The section with Tor settings has been renamed to \"Connection settings.\" At the top of the settings tab, the current connection status is displayed, along with a button to check the functionality of the direct connection (not through Tor), allowing users to diagnose the source of connection problems.
<\/center>\n
The design of the information cards containing data about bridge nodes has been modified, allowing users to save working bridges and share them with other users. In addition to buttons for copying and sending the bridge node card, a QR code has been added, which can be scanned in the Tor Browser version for Android.
<\/center> <\/p>\n
When multiple saved maps are available, they are grouped into a compact list, with items expanding upon click. The in-use bridge is marked with a \"\u2714 Connected\" icon. To visually differentiate the bridge parameters, \"emoji\" images are employed. The lengthy list of fields and options for bridge nodes has been removed, and the available methods for adding a new bridge have been moved to a separate block.
<\/center> <\/p>\n
The main package includes documentation from the website tb-manual.torproject.org, which is linked from the configurator. Thus, in case of connection issues, the documentation is now available in offline mode. You can also view the documentation through the menu «Application Menu > Help > Tor Browser Manual» and the service page «about:manual».\n
By default, the HTTPS-Only mode is enabled, where all requests made without encryption are automatically redirected to the secure versions of the pages («http:\/\/» is replaced with «https:\/\/»). The HTTPS-Everywhere extension, which was previously used for redirecting to HTTPS, has been removed from the Tor Browser version for desktop systems but retained in the Android version.\n
Improved font support. To protect against system identification via the enumeration of available fonts, Tor Browser comes with a fixed set of fonts, blocking access to system fonts. This restriction has led to display issues on some websites using system fonts not included in the built-in Tor Browser font set. To resolve this issue, the built-in font set has been expanded in the new release, particularly adding fonts from the Noto family. <\/ul>\n
![\"Release](\"\/wp-content\/uploads\/2022\/07\/685c5b7d3ee703c7496b13a93c627992.jpg\")
<\/center> <\/p>\n![\"Release](\"\/wp-content\/uploads\/2022\/07\/451fe408693db4f9c2792cb847a5e145.jpg\")
<\/center>\n![\"Release](\"\/wp-content\/uploads\/2022\/07\/2375a9178ba2d0f6a9c1290830d21dbe.jpg\")
<\/center> <\/p>\n![\"Release](\"\/wp-content\/uploads\/2022\/07\/d1d4bf0deeda1ce36ce740baa3105718.jpg\")
<\/center> <\/p>\n