From f6e2f0042937c007cdff9cf0747ba324a331f950 Mon Sep 17 00:00:00 2001 From: Jonah Aragon Date: Sat, 8 Mar 2025 10:11:58 +0000 Subject: [PATCH] update: Note iOS limitations wrt Onion Browser (#2934) Signed-off-by: Tad <8296104+SkewedZeppelin@users.noreply.github.com> Signed-off-by: Daniel Gray --- docs/tor.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/tor.md b/docs/tor.md index 1b3ebe07..e9002b5d 100644 --- a/docs/tor.md +++ b/docs/tor.md @@ -121,6 +121,8 @@ All versions are signed using the same signature, so they should be compatible w +On iOS, Orbot has some limitations that could potentially cause crashes or leaks: iOS does not have an effective OS-level feature to block connections without a VPN like Android does, and iOS has an artificial memory limit for network extensions that makes it challenging to run Tor in Orbot without crashes. Currently, it is always safer to use Tor on a desktop computer compared to a mobile device. + ## Onion Browser (iOS)
@@ -146,4 +148,6 @@ All versions are signed using the same signature, so they should be compatible w Onion Browser does not provide the same levels of privacy protections as Tor Browser does on desktop platforms. For casual use it is a perfectly fine way to access hidden services, but if you're concerned about being traced or monitored by advanced adversaries you should not rely on this as an anonymity tool. +[Notably](https://github.com/privacyguides/privacyguides.org/issues/2929), Onion Browser does not *guarantee* all requests go through Tor. When using the built-in version of Tor, [your real IP **will** be leaked via WebRTC and audio/video streams](https://onionbrowser.com/faqs) due to limitations of WebKit. It is *safer* to use Onion Browser alongside Orbot, but this still comes with some limitations on iOS (noted in the Orbot section above). + [^1]: The `IsolateDestAddr` setting is discussed on the [Tor mailing list](https://lists.torproject.org/pipermail/tor-talk/2012-May/024403.html) and [Whonix's Stream Isolation documentation](https://whonix.org/wiki/Stream_Isolation), where both projects suggest that it is usually not a good approach for most people.