J.M. Porup (UK) - Jan 9, 2017 1:42 pm UTC

Techno Fishy

When Mike Tigas first created the Onion Browser app for iOS in 2012, he never expected it to become popular. He was working as a newsroom Web developer at The Spokesman-Review in Spokane, Washington, at the time, and wanted a Tor browser app for himself and his colleagues. Expecting little interest, he then put Onion Browser on the Apple App Store at just $0.99/0.69, the lowest non-zero price that Apple allows.

Fast forward to 2016, and Tigas found himself living in New York City, working as a developer and investigative journalist at ProPublica, while earning upwards of $2,000 a month from the appand worrying that charging for it was keeping anonymous browsing out of the hands of people who needed it.

"Given recent events, many believe it's more important than ever to exercise and support freedom of speech, privacy rights, and digital security," he wrote in a blog post. "I think now is as good a time as ever to make Onion Browser more accessible to everyone."

Global concerns also influenced his decision. "Iran is not technically a country where you can get an iPhone, but on the grey market you can," he told Ars. "People over there can't get apps you have to pay for, because you have to have a credit card that Apple actually accepts," he added, noting that economic sanctions forbid Apple from selling to Iranian iOS users.

Onion Browser is the leading, community-supported Tor Web browser for iOS, but it lacks some of the features available for Tor Browser (Linux, MacOS, Windows) and OrFox (Android), due to technical roadblocks peculiar to iOS. (The Tor Project has so far declined to officially endorse an app for iOS.)

Onion Browser for iOS.

Onion Browser settings

The two biggest challenges Tor developers on iOS face, as Tigas outlined in this blog post on the Tor Project website, are Apple's requirement that all browsers use the iOS WebKit rendering engine, and the inability to run Tor as a system-wide service or daemon on iOS.

Developers have found workarounds to both problems, and iOS users can soon expect to see a new, improved Onion Browser, as well as a Tor VPN that routes all device traffic over Torprobably in the first quarter of 2017.

Unlike the Tor or OrFox, Onion Browser is not based on the Firefox Gecko rendering engine. This is goodOnion Browser is not vulnerable to Firefox exploitsbut also bad, because code cannot be reused.

A further challenge, Tigas said, is that Apples WebKit APIs "dont allow a lot of control over the rendering and execution of Web pages, making a Tor Browser-style security slider very difficult to implement."

Many of iOS's multimedia features don't use the browser's network stack, making it difficult to ensure the native video player does not leak traffic outside of Tor.

"Onion Browser tries to provide some functionality to block JavaScript and multimedia, but these features arent yet as robust as on other platforms," Tigas wrote.

Moreover, it doesn't support tabbed browsing, and the UX is pretty basic, but Tigas is working on a rewrite based on Endless. "It adds a lot of important features over the existing Onion Browser, he said, like a nicer user-interface with tabbed browsing, HTTPS Everywhere, and HSTS Preloading. Theres a new version of Onion Browser in the works thats based on Endless that will hopefully enter beta testing this month."

Continued here:

The official Tor browser for iOS is free to use | Ars Technica