Browser Privacy Test

测试

• https://browserleaks.com/
• https://coveryourtracks.eff.org/
• https://privacy.net/analyzer/
• http://whatismydnsresolver.com/
• https://www.cloudflare.com/ssl/encrypted-sni/
• https://tls-ech.dev/
• https://dnscheck.tools/#more

浏览器指纹

1. Http Header、地理位置、时区、已登录账号、Cookies、插件 等

   插件，非扩展，运行于独立的进程， 具有系统当前用户权限

2. Canvas Fingerprint 、 WebGL Fingerprint、 AudioContext Fingerprint、 Font Fingerprint 、TLS fingerprint、WebRTC、DNS 等

WebRTC and SNI

about:config
media.peerconnection.enabled=false
network.dns.echconfig.enabled=true
network.dns.use_https_rr_as_altsvc=true
network.dns.http3_echconfig.enabled=true
network.security.esni.enabled=true
network.trr.mode=true

chrome://flags/#enable-webrtc-hide-local-ips-with-mdns
chrome://flags/#encrypted-client-hello
#Feature: IP Protection
#For more info visit
#https://chromestatus.com/feature/5111460239245312
chrome://flags/#ip-protection-v1
#Disable search images using Google Lens in Chrome
chrome://flags/#enable-lens-standalone

edge://flags/#enable-webrtc-hide-local-ips-with-mdns
#try start EDGE with parameter --enable-features=EncryptedClientHello

DNS

开启安全的DNS，DoT或DoH
和IPv4一样，正确配置IPv6，防止绕过
ovpn文件中可加入block-outside-dns，防止特定情况被强制dns泄露

TLS

具体可看 https://wzyboy.im/post/1130.html

最后

完全隐藏，不太可行，也没必要。