https://browserleaks.com/proxy

Whichever you choose just make sure to disable the automatic autofill.

Brown sugar

• I prefer to hide in the plain sight. I use Google, MSA, Bing, Edge, Onedrive, Outlook.
• Trying to hide too much is like using DoNoTrack, it only draws the needless attention.
• I use Outlook for official business, gmail for eshops, they know my real name and location.
• But I separate browsers, Edge for casual, Brave for Google/YouTube, LibreWolf for FB, TOR for other.
• I use NextDNS blocking GAFAM, I avoid browser extensions (easily identified). Firewall blocks ports 53/80.

That is smart, I actually share my setup: https://github.com/TairikuOokami/Windows

Technically there is nothing personal, not even a real IP, just Windows hardening.

In the end you still need to be infected by malware to be exploited, I have disabled even Meltdown/Spectre mitigations to regain performance.

For now, but they are slowly being abandoned in favor of DoH and DoQ. DoT is deprecated even on Android 13 and replaced by DoH.

For security. It uses a separate port, so it can not be easily abused by malware/hijacked, you will simply allow a single IP, unlike with DoH, where you have allowed all the traffic.

Yes, DoH is good for privacy, but not for security.

It is supposed to replace TCP, but till then it sort of uses both. I use it only on Brave for Youtube/Google.

QUIC uses UDP for ports and connectionless transport, then adds the resiliency of TCP, the security of TLS 1.3, sprinkles in a dash of commands and version control from protocols like SMB, and then mixes in a set of new protocol concepts and efficiencies to create something entirely unique in the protocol world.

Yes, because UDP > TCP. They keep using excuses like that UDP is unreliable, because you can lost packets, I have never lost a single one.

They want people to use easily tracked TCP. UDP is a simple request, TCP has to establish the connection, QUIC by Google is even worse.

Unfortunately DNScrypt was never accepted as a standard, so it will eventually fade away and we will be forced to use DoH, I prefer DoT.

Use a safer DNS preferably encrypted to prevent tampering/poisoning, like NextDNS, ControlID or Cloudflare (Malware version), that alone will do wonders, because it blocks malicious downloads, phishing, C&C, etc. List: https://adguard-dns.io/kb/general/dns-providers

Best with default settings, change those and many “leaks” no longer exist.

Not to mention that you can easily tame the browser with a firewall & DNS.

Brave is a silent Google’s branch, thus the reason it can block youtube ads and allow background playing on android.

It is literally #1 browser you move to, if you want to avoid Chrome. Well played. It’s shield can not be really disabled.

EDIT: But the voting I can see that people have not changed, they do not like the truth, trust your gods blindly then.

It started good, but then people realized that it is not reddit, so they moved back, failing to embrace the change.

I do not blame them, I miss the content and my 15k account, but I have removed it, so there is no going back for me.

Digitally signed, but with invalid certificates, so not a real problem for security aware users.

edge-microsoft-root-store-enabled/EnableCertPaddingCheck/ValidateAdminCodeSignatures

www.bleepingcomputer.com/news/microsoft/10-year-old-windows-bug-with-opt-in-fix-exploited-in-3cx-attack

If I were serious, I would use crypto, but I have virtually no money and NSFW toys from Japan are not illegal here, yet.

The problem is that when you order something online, you have to provide your real name and address, so whatever.