Safe Browsing in e/os browser

Hi everyone,

Stupid question maybe but in the e/os browser you can turn on Safe Browsing. The description of this option mentions sending info to Google however. Does that actually happen or is it safe/private to turn it on?

Thanks for the help!

Regain your privacy! Adopt /e/OS the deGoogled mobile OS and online servicesphone

if it would work, it would talk to Google. But while it is offered in the UI, it is quite broken when enabled. When a site is requested, there’s no traffic to safebrowsing Endpoints at Google and only after timeouts will load the requested page.

Cromite, which patches /e/OS Browser imports, has the feature intentionally disabled via policy and hides it in the UI:

/e/OS only imports the first patch, but not the policy. I assume murena wants it hidden too and forgot the policies. Worth a bugreport.

3 Likes

Aaaah, got it! Thank you very much! :blush:.

Follow up question… Other chromium based options like Brave do have it enabled. From what I understand the main risk is that that sometimes sends your IP to Google. So what if you use Brave and a VPN? Would it be OK to use the option then (and safer than not using it)?

Thanks again! :blush:

brave proxies safebrowsing. According to this you’re sending partial hashes of the url you visit to a Safebrowsing Update API, but there’s also a cleartext url API. I’m not a user so don’t know when each API is used.

Thanks tceyk!

I thought there were some differences between the desktop and android versions though, and that the proxy is not used on Android (but could be wrong).

There is a related bug report available:

I added these information to the comments of the bug report.

just to reiterate it as it gets lost in lots of text: the intention of cromite is to fully disable SafeBrowsing.

I added a MR to the gitlab issue that will finally do so.

This topic was automatically closed after 90 days. New replies are no longer allowed.