@freedcreative Here's the reference docs: https://valadoc.org/webkit2gtk-web-extension-4.0/index.htm

Like all GNOME APIs it's available via C, Python, Ruby, Vala, JavaScript, and I can't remember what else.

index.htm – webkit2gtk-web-extension-4.0

The canonical source for Vala API references.

@alcinnz
We were just coming online to voice a concern that there is a "chrome://" protocol(?) serving javascript in #Tor.

What do people here think of Tor?

If there were to be a new standard we wonder whether it could use the work that Tor have already done?

So there's less a need to reinvent the wheel?

Maybe something that can easily plug into Tor or #i2p? Same way you have a different window for #privateBrowsing in Firefox?

@freedcreative

@dsfgs I haven't bothered using Tor, but I understand it's a very valuable tool. I also understand Tor works at the TLS level, so it should slot nicely into Gemini, Gopher, or whatever.

Personally I like to encourage using a significantly simpler subset of The Web which isn't trying to do everything. In which case Tor Browser doesn't need to do anything, just continue to include Noscript out-of-the-box.

@freedcreative

@alcinnz
We believe that #networkLevel #anonymity can help to free society from #BigData and the #surveillanceState.

Not all of #internet searches and page views, crypto transactions should be linkable to an individual. That's why we support #networkLevel #onionRouting and believe it ought be used for *all* internet browsing.

You could say we are #OnionMaximallists, haha. Or #GarlicMaximallists.

Whatever your spice (HELLO SLOGAN for a #Tor #i2p browser!)

#whateverYourSpice

@freedcreative

@dsfgs @alcinnz @freedcreative holy f*cl, did you coin the word OnionMaximalist? I'm stealing it.

@tomosaigon
Maybe we did. You'll need to do some digging to be sure :)

Maximally has two 'L', so we assume it'd need to be #onionMaximallist.

You can add "maximallist" to anything you're partial to, and signal you're into bitcoin without being censored. ;)

@alcinnz @freedcreative

@dsfgs the dictionary has "maximalism" and "maximalist" (1 l), who am I to judge. I know (likely) far too many Bitcoin maximalists.

@alcinnz @freedcreative

@alcinnz
BTW Tor does a fair amount of stuff, not just providing NoScript and HTTPSEverywhere out of the box.

Aside from the obvious bouncing traffic through the onionRouter, it has a stepping system for screen sizes so many users have the same browser pane size (if reported by CSS media queries etc). It restricts the type of JS operations to safer ones.

It does a lot to help avoid fingerprinting.

@freedcreative

@dsfgs Yes, I am taking active anti-fingerprinting measures in developing my own browser engines! Thinking about what data I'm leaking and taking active steps against it.

The only thing deducable from Rhapsode's networking traffic is that you're using Rhapsode.

And I will be vague about screensize, etc info as is leaked by media queries to the server. Haven't finished because Rhapsode doesn't have a screen to worry about.

@freedcreative

@alcinnz
Interesting.

So will Rhapsode be a type of onion(?), garlic(?) or something-else-routing browser?

@freedcreative

@dsfgs I'd definitely welcome contributions that way! But my focus is on what to do with pages once they've been downloaded, which keeps me *plenty* busy.

It *would* be good to support onion routing! Advice?

And I'm very keen to support some sort of peer-to-peer hosting, like @cwebber 's DataShards, based on DHT technology!

@freedcreative

@alcinnz
It may serve you to use #i2prouter and talk to the dev team.

When you run i2prouter it starts your default browser, showing a console with routing info and apps and services. Your broswer experience might be useful as such a service.

So #i2p cover the routing but are struggling to offer an official web browser, last we heard.
@cwebber @freedcreative

@alcinnz @dsfgs @cwebber @freedcreative
AFAIK Tor (not to be confused with TorBrowser) can act as a SOCKS proxy, so if your browser supports SOCKS proxies it should be able to use Tor just fine. (How secure that is is another question)

@wolf480pl
Quite right, if the browser does everything over HTTPS then running it with #torsocks might be a way forward also.

Eg.

> $ torsocks rhapsode

Likewise how secure and fingerprint resistant that might be would need to be assessed.

@alcinnz @cwebber @freedcreative

@dsfgs @wolf480pl @cwebber @freedcreative Cool! I'll have another look at the HTTP client I'm using!