{"id":106529,"date":"2023-01-27T12:48:11","date_gmt":"2023-01-27T10:48:12","guid":{"rendered":"https:\/\/prohoster.info\/?p=106529"},"modified":"2023-02-07T12:09:04","modified_gmt":"2023-02-07T10:09:04","slug":"vypusk-web-brauzera-ceno-2-0-ispolzuyushhego-p2p-set-dlya-obhoda-blokirovok","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/news\/vypusk-web-brauzera-ceno-2-0-ispolzuyushhego-p2p-set-dlya-obhoda-blokirovok","title":{"rendered":"Release of the CENO 2.0 web browser, which uses a P2P network to bypass censorship.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

eQualite has released version 2.0.0 of the mobile web browser CENO (CEnsorship.NO), designed to facilitate access to information under censorship, traffic filtering, or disconnection of internet segments from the global network. The browser is built on the GeckoView engine (used in Firefox for Android) and is enhanced with the capability of data exchange through a decentralized P2P network, where users participate in redirecting traffic to external gateways that provide access to information bypassing filters. The project\u2019s developments are distributed under the MIT license. Ready builds are available on Google Play. <\/p>\n

The P2P functionality has been moved to a separate library called Ouinet, which can be used to add circumvention tools to arbitrary applications. The CENO browser and the Ouinet library allow access to information in conditions of active proxy server blocking, VPN<\/a>, gateways, and other centralized traffic filtering circumvention mechanisms, even up to complete internet disconnection in censored areas (when content is fully blocked, it may be served from cache or local storage). <\/p>\n

The project utilizes caching content on each user's side while maintaining a decentralized cache of popular content. When a user opens a website, the downloaded content is cached in the local system and becomes available to participants of the P2P network who cannot access the resource directly or to the gateways for circumventing blocks. Each device only retains data directly requested from that device. Identification of cached pages is done using a hash of the URL. All additional data related to the page, such as images, scripts, and styles, are grouped and delivered together under a single identifier. <\/p>\n

To gain access to new content that is blocked from direct access, special proxy gateways (injector) are used, which are placed in external parts of the network that are not subject to censorship. Information between the client and the gateway is encrypted using public key encryption. Digital signatures are used to identify gateways and prevent the introduction of malicious gateways, while the keys of the project-supported gateways are included in the browser distribution. <\/p>\n

To access the gateway under conditions of its blocking, a chain connection through other users is supported, who act as proxies to route traffic to the gateway (data is encrypted with the gateway's key, which prevents transit users, through whose systems the request is transmitted, from intercepting the traffic or determining its content). Client systems do not send external requests on behalf of other users, but either return data from the cache or are used as a link to establish a tunnel to the proxy gateway. <\/p>\n

\"Release<\/center> <\/p>\n

Standard requests are initially attempted to be delivered directly by the browser, and if the direct request fails, it performs a search in the distributed cache. If the URL is not in the cache, information is requested through a connection to the proxy gateway or by contacting the gateway through another user. Confidential data, such as cookies, are not stored in the cache. <\/p>\n

\"Release<\/center> <\/p>\n

Each system in a P2P network is assigned an internal identifier used for routing within the P2P network, but it is not tied to the physical location of the user. The integrity of the information transmitted and stored in the cache is ensured through the use of digital signatures (Ed25519). The transmitted traffic is encrypted using TLS. A distributed hash table (DHT) is used to access information about the network structure, participants, and cached content. When necessary, besides HTTP, \u00b5TP or Tor can also be used as transport. <\/p>\n

At the same time, CENO does not provide anonymity, and information about sent requests is available for analysis on participants' devices (for example, a hash can determine that a user accessed a specific website). For confidential requests, such as those requiring a connection to one's email account or social media, it is recommended to use a separate private tab, during which data is requested only directly or through the proxy gateway, without access to the cache and without being stored in the cache. <\/p>\n

Among the changes in the new release: <\/p>\n