foxyproxy

I'm not writing this to undermine FoxyProxy in any way as opposed to any other extension. I use FoxyProxy on a regular basis and think it makes things a lot easier. But there are some issues that need to be addressed.

It has been mentioned before by some people (including the Tor documentation and help section) that using FoxyProxy can pose a security risk because it can leak the related domains of the visited domain. As an example: Youtube.com uses another domain as a supporting/auxilliary domain, namely ytimg.com. If you add youtube.com to your patterns, ytimg.com is not added automatically and when you visit youtube, ytimg.com is still accessed without the selected proxy. Now this can help your ISP (or other monitoring/filtering/censoring bodies) to detect that you have been using youtube.com. I don't know how much more information may be got from this, for example whether they will know what particular video you watched, but that much can be inconvenient or even unsafe in repressive countries.

There are three solutions:

1) When a person adds a particular site to the patterns list, especially via QuickAdd, a list of all the dependencies on the page (other domains used on the page) be shown to the user as a check list to let the user choose which other domains/subdomains he wants to add to the patterns. For this purpose, the code from "View Dependencies" extension for FireFox could be utilized: (https://addons.mozilla.org/en-US/firefox/addon/2214). As an example when the user adds youtube either through QuickAdd, AutoAdd, or manually, list like the following will be shown him to choose which ones to add to that particular proxy's pattern list:

* youtube.com
* ytimg.com
* doubleclick.net

OR

2) When a domain/page is added all other domains/subdomains used in that page be added to the pattern automatically

OR

3) Other domains/subdomains are not added to the pattern list, but when a page is visited all the other domains/subdomains used in it are also accessed via the selected proxy.

I know that the development of any of the above solutions mentioned for the posed problem involves lots of technical difficulties and it will be a huge task to implement any one of the proposed solutions, but if this problem is not addressed, this great extension will defeat its own purpose.

I would like to thank Mr Jung again for this great extension.