From de2c4675850a1b16f8ee55a29c641ce37fe5e5f1 Mon Sep 17 00:00:00 2001 From: Daniel Micay Date: Tue, 29 Sep 2020 02:41:22 -0400 Subject: [PATCH] clarify captive portal check URLs further --- static/faq.html | 19 +++++++++++-------- 1 file changed, 11 insertions(+), 8 deletions(-) diff --git a/static/faq.html b/static/faq.html index 67e7617e..96586b69 100644 --- a/static/faq.html +++ b/static/faq.html @@ -488,15 +488,18 @@ are designed to detect and handle captive portals which substitute the expected empty 204 response with their own web page.

+

By default, GrapheneOS leaves these set to the standard four URLs to blend + into the crowd of billions of other Android devices with and without Google + Mobile Services performing the same empty GET requests. For privacy reasons, + it isn't desirable to stand out from the crowd and changing these URLs or even + disabling the feature will likely reduce your privacy by giving your device a + more unique fingerprint. GrapheneOS aims to appear like any other common + mobile device on the network.

+

These need use a very common domain and URL in order to bypass whitelisting - systems only permitting access to common domains / URLs so a domain like - grapheneos.org would likely be inadequate. GrapheneOS leaves these set to the - standard four URLs to blend into the crowd of billions of other Android - devices with and without Google Mobile Services performing the same empty GET - requests. For privacy reasons, it isn't desirable to stand out from the crowd - and changing these URLs or even disabling the feature will likely reduce your - privacy by giving your device a more unique fingerprint. GrapheneOS aims to - appear like any other common mobile device on the network.

+ systems only permitting access to common domains / URLs so you may experience + issues if you choose to use connectivitycheck.grapheneos.org instead of the + standard URLs.

Standard frozen AOSP user agent for the GET request:

Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.32 Safari/537.36