1175:
325:
Thus, an administrator should make sure that a user can trust all the DHCP servers in an organisation and that all possible wpad domains for the organisation are under control. Furthermore, if there's no wpad domain configured for an organisation, a user will go to whatever external location has the
316:
Through the WPAD file, the attacker can point users' browsers to their own proxies and intercept and modify the WWW traffic of everyone connected to the network. Although a simplistic fix for
Windows WPAD handling was applied in 2005, it only fixed the problem for the .com domain. A presentation at
321:
showed that the rest of the world was still critically vulnerable to this security hole, with a sample domain registered in New
Zealand for testing purposes receiving proxy requests from all over the country at the rate of several a second. Several of the wpad.tld domain names (including COM, NET,
266:
environment. When automatic proxy detection is used, WinHTTP and WinINET in
Internet Explorer 6 and earlier send a "Host: <IP address>" header and IE7+ and Firefox sends a "Host: wpad" header. Therefore, it is recommended that the wpad.dat file be hosted under the default virtual host rather
123:
implementing this method sends a DHCPINFORM query to the local DHCP server, and uses the URL from the WPAD option in the server's reply. If the DHCP server does not provide the desired information, DNS is used. If, for example, the network name of the user's computer is
311:
Leaked WPAD queries could result in domain name collisions with internal network naming schemes. If an attacker registers a domain to answer leaked WPAD queries and configures a valid proxy, there is potential to conduct man-in-the-middle (MitM) attacks across the
219:
In order to use DHCP, the server must be configured to serve up the "site-local" option 252 ("auto-proxy-config") with a string value of e.g. http://example.com/wpad.dat where "example.com" is the address of a Web
286:
While greatly simplifying configuration of one organisation's web browsers, the WPAD protocol has to be used with care: simple mistakes can open doors for attackers to change what appears on a user's browser:
294:
If the network is 'company.co.uk' and the file http://wpad.company.co.uk/wpad.dat isn't served, the browsers will go on to request http://wpad.co.uk/wpad.dat. Before the introduction of the
178:
The browser guesses where the organisation boundaries are. The guess is often right for domains like 'company.com' or 'university.edu', but wrong for 'company.co.uk' (see security below).
104:
Web Proxy Auto-Discovery
Protocol (WPAD) standard: ensure that an organization's browsers will find this file without manual configuration. This is the topic of this article.
168:
DHCP has a higher priority than DNS: if DHCP provides the WPAD URL, no DNS lookup is performed. This only works with DHCPv4. In DHCPv6, there is no WPAD-Option defined.
94:
In order for all browsers in an organization to be supplied the same proxy policy, without configuring each browser manually, both the below technologies are required:
333:
On top of these traps, the WPAD method fetches a JavaScript file and executes it on all users browsers, even when they have disabled JavaScript for viewing web pages.
301:
The same method has been used with http://wpad.org.uk. This used to serve a wpad.dat file that would redirect all of the user's traffic to an internet auction site.
326:
next wpad site in the domain hierarchy and use that for its configuration. This allows whoever registers the wpad subdomain in a particular country to perform a
82:). WPAD is documented in an INTERNET-DRAFT which expired in December 1999. However, WPAD is still supported by all major browsers. WPAD was first included with
668:
50:
The WPAD protocol only outlines the mechanism for discovering the location of this file, but the most commonly deployed configuration file format is the
322:
ORG, and US) now point to the client loopback address to help protect against this vulnerability, though some names are still registered (wpad.co.uk).
108:
The WPAD standard defines two alternative methods the system administrator can use to publish the location of the proxy configuration file, using the
175:. Then, it "moves up" in the hierarchy by removing more parts of the domain name, until it finds a WPAD PAC file or leaves the current organisation.
42:
discovery methods. Once detection and download of the configuration file is complete, it can be executed to determine the proxy for a specified URL.
350:
1211:
2376:
956:
827:
153:
207:
are currently the only browsers offering support for both the DHCP and DNS methods; the DNS method is supported by most major browsers.
109:
35:
1376:
171:
When constructing the query packet, DNS lookup removes the first part of the domain name (the client host name) and replaces it with
966:
961:
812:
685:
451:
1125:
1029:
935:
2361:
853:
661:
1117:
1034:
128:, the browser will try the following URLs in turn until it finds a proxy configuration file within the domain of the client:
330:
on large portions of that country's internet traffic by setting themselves as a proxy for all traffic or sites of interest.
497:
2068:
2189:
832:
807:
477:
2371:
2366:
1613:
101:(PAC) standard: create and publish one central proxy configuration file. Details are discussed in a separate article.
2346:
2320:
1698:
1204:
1178:
781:
654:
270:
Internet
Explorer version 6.0.2900.2180.xpsp_sp2_rtm requests "wpad.da" instead of "wpad.dat" from the Web server.
2234:
2083:
1930:
1064:
1014:
774:
1965:
920:
767:
327:
1841:
981:
971:
837:
2356:
2264:
1802:
1744:
1618:
1523:
1433:
1419:
1079:
925:
2351:
2315:
2284:
2209:
2199:
2159:
1548:
1304:
1197:
915:
822:
361:
291:
An attacker inside a network can set up a DHCP server that hands out the URL of a malicious PAC script.
308:
can break the DNS lookup of the WPAD protocol by directing users to a host that is not a proxy server.
298:
in the 2010s, some browsers could not determine that wpad.co.uk was no longer inside the organization.
2325:
2249:
2219:
2179:
2169:
2024:
1870:
1811:
1674:
1659:
1597:
1443:
1324:
1074:
1049:
1019:
910:
750:
745:
145:(Note: These are examples and are not "live" URLs due to them employing the reserved domain name of "
2164:
2149:
2113:
2063:
2048:
1865:
1846:
1821:
1749:
1488:
1448:
1367:
740:
735:
730:
725:
720:
715:
710:
705:
700:
83:
63:
529:
2154:
2118:
2098:
2053:
1980:
1915:
1910:
1754:
1739:
1693:
1543:
1468:
1259:
976:
608:
355:
295:
113:
79:
59:
39:
623:
185:. For the DHCP protocol, any URL is usable. For traditional reasons, PAC files are often called
17:
2274:
2244:
1989:
1734:
1438:
1264:
1152:
677:
554:
410:"Chromium #18575: Non-Windows platforms: WPAD (proxy autodetect discovery) does not test DHCP"
256:
197:
98:
51:
277:
may have to be disabled, or the registry can be modified to edit the list of blocked queries.
1999:
1900:
1856:
1568:
1513:
1453:
1269:
1044:
868:
549:
409:
75:
2224:
2078:
2058:
1059:
873:
263:
1142:
1685:
1558:
1503:
1483:
1147:
1069:
1004:
999:
940:
455:
249:
430:
383:
2340:
1935:
1498:
1458:
1428:
1279:
1105:
1024:
817:
305:
2294:
2174:
2073:
2009:
2004:
1994:
1945:
1885:
1492:
1160:
1100:
1095:
1039:
141:
http://wpad.com/wpad.dat (in incorrect implementations, see note in
Security below)
71:
1940:
223:
In order to use the DNS only method, a DNS entry is needed for a host named WPAD.
2279:
2259:
2128:
2093:
2029:
1955:
1718:
1607:
1602:
1553:
1528:
1518:
1362:
1319:
1314:
1220:
1009:
576:
507:
146:
120:
233:
In both cases, the Web server must be configured to serve the WPAD file with a
2184:
1970:
1960:
1905:
1895:
1764:
1587:
1538:
1508:
1309:
885:
2019:
2014:
1875:
1708:
1703:
1664:
1633:
1628:
1592:
1533:
1386:
930:
890:
787:
628:
234:
204:
193:
67:
34:
is a method used by clients to locate the URL of a configuration file using
382:
Gauthier, Paul; Josh Cohen; Martin
Dunsmuir; Charles Perkins (1999-07-28).
196:
of the configuration file must be "application/x-ns-proxy-autoconfig". See
189:(of course, files with this name will be ignored by the WPAD DNS search).
2269:
2133:
1950:
1880:
1836:
1831:
1713:
1638:
1623:
227:
55:
2229:
2214:
2088:
1826:
1759:
1577:
1478:
1054:
895:
880:
858:
581:
431:"Firefox #356831 - Proxy autodiscovery doesn't check DHCP (option 252)"
318:
157:
62:. The WPAD protocol was drafted by a consortium of companies including
2289:
2254:
2239:
2204:
2108:
2039:
1925:
1920:
1890:
1816:
1650:
1582:
1473:
1463:
1381:
1334:
646:
2194:
2103:
1357:
1329:
1292:
1110:
905:
900:
639:
273:
If
Windows Server 2003 (or later) is used as the DNS server, the
2123:
1669:
1352:
1287:
863:
388:
1790:
1407:
1231:
1193:
1189:
650:
1769:
1299:
502:
215:
In order for WPAD to work, a few requirements have to be met:
181:
For DNS lookups, the path of the configuration file is always
152:
Additionally on
Windows if the DNS query is unsuccessful then
609:"Automatic proxy HTTP server configuration in web browsers"
452:"Troubleshooting Web Proxy Auto Discovery (WPAD) issues"
577:"Alert (TA16-144A) WPAD Name Collision Vulnerability"
226:
The host at the WPAD address must be able to serve a
384:"Web Proxy Auto-Discovery Protocol (INTERNET-DRAFT)"
2142:
2038:
1979:
1855:
1801:
1727:
1683:
1649:
1567:
1418:
1345:
1278:
1252:
1135:
1088:
992:
949:
846:
800:
759:
693:
684:
132:http://wpad.department.branch.example.com/wpad.dat
262:Use caution when configuring a WPAD server in a
1205:
662:
8:
1798:
1787:
1415:
1404:
1249:
1228:
1212:
1198:
1190:
690:
669:
655:
647:
351:"Navigator Proxy Auto-Config File Format"
244:If the DNS method is used, a file named
32:Web Proxy Auto-Discovery (WPAD) Protocol
342:
248:must be located in the WPAD Web site's
135:http://wpad.branch.example.com/wpad.dat
1035:Microsoft Java Virtual Machine (MSJVM)
498:"Konqueror: Automatic Proxy Discovery"
7:
624:"DNS Server Global Query Block List"
154:Link-Local Multicast Name Resolution
607:de Boyne Pollard, Jonathan (2004).
550:"Removing WPAD from DNS block list"
255:The PAC files are discussed in the
110:Dynamic Host Configuration Protocol
275:DNS Server Global Query Block List
119:Before fetching its first page, a
25:
967:Integrated Windows Authentication
239:application/x-ns-proxy-autoconfig
1174:
1173:
1126:United States v. Microsoft Corp.
1015:Channel Definition Format (.cdf)
138:http://wpad.example.com/wpad.dat
126:pc.department.branch.example.com
18:Web Proxy Autodiscovery Protocol
1065:Server Gated Cryptography (SGC)
640:"PAC File & WPAD Examples"
530:"WPAD does not resolve in DNS"
454:. GFI Software. Archived from
54:format originally designed by
1:
476:Hjelmvik, Erik (2012-07-17).
622:Jim Groves (November 2007).
528:King, Michael (2010-02-17).
506:. 2013-05-20. Archived from
360:. March 1996. Archived from
2377:Service discovery protocols
823:Browser Helper Object (BHO)
304:ISPs that have implemented
2393:
2311:
2235:Internet Explorer for Mac
1797:
1786:
1414:
1403:
1248:
1227:
1169:
921:Temporary Internet Files
613:Frequently Given Answers
478:"WPAD Man in the Middle"
328:man-in-the-middle attack
2362:Computer configuration
1080:Windows Desktop Update
1030:Internet Mail and News
926:Vector Markup Language
203:Internet Explorer and
76:Sun Microsystems, Inc.
60:Netscape Navigator 2.0
84:Internet Explorer 5.0
68:Microsoft Corporation
2220:IBM Home Page Reader
1075:Windows Address Book
950:Software and engines
1020:Comic Chat/Chat 2.0
558:. 26 September 2008
64:Inktomi Corporation
2372:Domain Name System
2367:Internet Standards
1112:Eolas v. Microsoft
1101:Second Browser War
957:Administration Kit
941:XHR/XDomainRequest
356:Netscape Navigator
296:Public Suffix List
200:for more details.
114:Domain Name System
72:RealNetworks, Inc.
2347:Internet Explorer
2334:
2333:
2307:
2306:
2303:
2302:
1990:Internet Explorer
1782:
1781:
1778:
1777:
1399:
1398:
1395:
1394:
1187:
1186:
1153:Dean Hachamovitch
1096:First Browser War
796:
795:
678:Internet Explorer
555:Microsoft TechNet
257:Proxy auto-config
198:Proxy auto-config
99:Proxy auto-config
52:proxy auto-config
27:Computer protocol
16:(Redirected from
2384:
1799:
1788:
1514:Samsung Internet
1416:
1405:
1250:
1229:
1214:
1207:
1200:
1191:
1177:
1176:
1119:Sun v. Microsoft
1045:MSN for Mac OS X
691:
671:
664:
657:
648:
643:
633:
616:
594:
593:
591:
590:
573:
567:
566:
564:
563:
546:
540:
539:
537:
536:
525:
519:
518:
516:
515:
494:
488:
487:
485:
484:
473:
467:
466:
464:
463:
448:
442:
441:
439:
438:
427:
421:
420:
418:
417:
406:
400:
399:
397:
396:
379:
373:
372:
370:
369:
347:
240:
21:
2392:
2391:
2387:
2386:
2385:
2383:
2382:
2381:
2337:
2336:
2335:
2330:
2299:
2225:IBM WebExplorer
2138:
2034:
1975:
1851:
1793:
1774:
1723:
1679:
1645:
1563:
1410:
1391:
1341:
1274:
1244:
1223:
1218:
1188:
1183:
1165:
1131:
1084:
1060:Outlook Express
993:Implementations
988:
962:Developer Tools
945:
874:HTML Components
842:
792:
755:
680:
675:
638:
621:
606:
603:
601:Further reading
598:
597:
588:
586:
575:
574:
570:
561:
559:
548:
547:
543:
534:
532:
527:
526:
522:
513:
511:
496:
495:
491:
482:
480:
475:
474:
470:
461:
459:
450:
449:
445:
436:
434:
429:
428:
424:
415:
413:
408:
407:
403:
394:
392:
381:
380:
376:
367:
365:
349:
348:
344:
339:
284:
264:virtual hosting
238:
213:
166:
156:(LLMNR) and/or
92:
48:
28:
23:
22:
15:
12:
11:
5:
2390:
2388:
2380:
2379:
2374:
2369:
2364:
2359:
2354:
2349:
2339:
2338:
2332:
2331:
2329:
2328:
2323:
2318:
2312:
2309:
2308:
2305:
2304:
2301:
2300:
2298:
2297:
2292:
2287:
2282:
2277:
2272:
2267:
2262:
2257:
2252:
2247:
2242:
2237:
2232:
2227:
2222:
2217:
2212:
2207:
2202:
2197:
2192:
2187:
2182:
2177:
2172:
2167:
2162:
2157:
2152:
2146:
2144:
2140:
2139:
2137:
2136:
2131:
2126:
2121:
2116:
2111:
2106:
2101:
2096:
2091:
2086:
2081:
2076:
2071:
2066:
2061:
2056:
2051:
2045:
2043:
2036:
2035:
2033:
2032:
2027:
2022:
2017:
2012:
2007:
2002:
1997:
1992:
1986:
1984:
1977:
1976:
1974:
1973:
1968:
1963:
1958:
1953:
1948:
1943:
1938:
1933:
1928:
1923:
1918:
1913:
1908:
1903:
1898:
1893:
1888:
1883:
1878:
1873:
1868:
1862:
1860:
1853:
1852:
1850:
1849:
1844:
1839:
1834:
1829:
1824:
1819:
1814:
1808:
1806:
1795:
1794:
1791:
1784:
1783:
1780:
1779:
1776:
1775:
1773:
1772:
1767:
1762:
1757:
1752:
1747:
1742:
1737:
1731:
1729:
1725:
1724:
1722:
1721:
1716:
1711:
1706:
1701:
1696:
1690:
1688:
1681:
1680:
1678:
1677:
1672:
1667:
1662:
1656:
1654:
1647:
1646:
1644:
1643:
1642:
1641:
1636:
1631:
1626:
1621:
1610:
1605:
1600:
1595:
1590:
1585:
1580:
1574:
1572:
1565:
1564:
1562:
1561:
1556:
1551:
1546:
1541:
1536:
1531:
1526:
1521:
1516:
1511:
1506:
1501:
1496:
1486:
1484:Microsoft Edge
1481:
1476:
1471:
1466:
1461:
1456:
1451:
1446:
1441:
1436:
1431:
1425:
1423:
1412:
1411:
1408:
1401:
1400:
1397:
1396:
1393:
1392:
1390:
1389:
1384:
1379:
1374:
1373:
1372:
1371:
1370:
1360:
1349:
1347:
1343:
1342:
1340:
1339:
1338:
1337:
1332:
1327:
1322:
1317:
1307:
1302:
1297:
1296:
1295:
1284:
1282:
1276:
1275:
1273:
1272:
1267:
1262:
1256:
1254:
1246:
1245:
1243:
1242:
1239:
1236:
1232:
1225:
1224:
1219:
1217:
1216:
1209:
1202:
1194:
1185:
1184:
1182:
1181:
1170:
1167:
1166:
1164:
1163:
1158:
1155:
1150:
1148:Thomas Reardon
1145:
1139:
1137:
1133:
1132:
1130:
1129:
1122:
1115:
1108:
1103:
1098:
1092:
1090:
1086:
1085:
1083:
1082:
1077:
1072:
1067:
1062:
1057:
1052:
1047:
1042:
1037:
1032:
1027:
1022:
1017:
1012:
1007:
1005:Active Desktop
1002:
1000:Active Channel
996:
994:
990:
989:
987:
986:
985:
984:
974:
969:
964:
959:
953:
951:
947:
946:
944:
943:
938:
933:
928:
923:
918:
913:
908:
903:
898:
893:
888:
883:
878:
877:
876:
871:
861:
856:
850:
848:
844:
843:
841:
840:
835:
830:
825:
820:
815:
810:
804:
802:
798:
797:
794:
793:
791:
790:
785:
778:
771:
763:
761:
757:
756:
754:
753:
748:
743:
738:
733:
728:
723:
718:
713:
708:
703:
697:
695:
688:
682:
681:
676:
674:
673:
666:
659:
651:
645:
644:
635:
634:
618:
617:
602:
599:
596:
595:
568:
541:
520:
489:
468:
443:
422:
401:
374:
341:
340:
338:
335:
314:
313:
309:
302:
299:
292:
283:
280:
279:
278:
271:
268:
260:
253:
250:root directory
242:
231:
224:
221:
212:
209:
165:
162:
160:will be used.
143:
142:
139:
136:
133:
112:(DHCP) or the
106:
105:
102:
91:
88:
47:
44:
26:
24:
14:
13:
10:
9:
6:
4:
3:
2:
2389:
2378:
2375:
2373:
2370:
2368:
2365:
2363:
2360:
2358:
2357:Proxy servers
2355:
2353:
2350:
2348:
2345:
2344:
2342:
2327:
2324:
2322:
2319:
2317:
2314:
2313:
2310:
2296:
2293:
2291:
2288:
2286:
2283:
2281:
2278:
2276:
2273:
2271:
2268:
2266:
2263:
2261:
2258:
2256:
2253:
2251:
2248:
2246:
2243:
2241:
2238:
2236:
2233:
2231:
2228:
2226:
2223:
2221:
2218:
2216:
2213:
2211:
2208:
2206:
2203:
2201:
2198:
2196:
2193:
2191:
2188:
2186:
2183:
2181:
2178:
2176:
2173:
2171:
2168:
2166:
2163:
2161:
2158:
2156:
2153:
2151:
2148:
2147:
2145:
2141:
2135:
2132:
2130:
2127:
2125:
2122:
2120:
2117:
2115:
2112:
2110:
2107:
2105:
2102:
2100:
2097:
2095:
2092:
2090:
2087:
2085:
2084:Nokia Symbian
2082:
2080:
2077:
2075:
2072:
2070:
2067:
2065:
2062:
2060:
2057:
2055:
2052:
2050:
2047:
2046:
2044:
2041:
2037:
2031:
2028:
2026:
2023:
2021:
2018:
2016:
2013:
2011:
2008:
2006:
2003:
2001:
1998:
1996:
1993:
1991:
1988:
1987:
1985:
1982:
1978:
1972:
1969:
1967:
1964:
1962:
1959:
1957:
1954:
1952:
1949:
1947:
1944:
1942:
1939:
1937:
1936:PirateBrowser
1934:
1932:
1931:Mozilla suite
1929:
1927:
1924:
1922:
1919:
1917:
1914:
1912:
1909:
1907:
1904:
1902:
1899:
1897:
1894:
1892:
1889:
1887:
1884:
1882:
1879:
1877:
1874:
1872:
1869:
1867:
1864:
1863:
1861:
1858:
1854:
1848:
1845:
1843:
1840:
1838:
1835:
1833:
1830:
1828:
1825:
1823:
1820:
1818:
1815:
1813:
1810:
1809:
1807:
1804:
1800:
1796:
1789:
1785:
1771:
1768:
1766:
1763:
1761:
1758:
1756:
1753:
1751:
1748:
1746:
1743:
1741:
1738:
1736:
1733:
1732:
1730:
1726:
1720:
1717:
1715:
1712:
1710:
1707:
1705:
1702:
1700:
1697:
1695:
1692:
1691:
1689:
1687:
1682:
1676:
1673:
1671:
1668:
1666:
1663:
1661:
1658:
1657:
1655:
1652:
1648:
1640:
1637:
1635:
1632:
1630:
1627:
1625:
1622:
1620:
1617:
1616:
1615:
1611:
1609:
1606:
1604:
1601:
1599:
1596:
1594:
1591:
1589:
1586:
1584:
1581:
1579:
1576:
1575:
1573:
1570:
1566:
1560:
1557:
1555:
1552:
1550:
1547:
1545:
1542:
1540:
1537:
1535:
1532:
1530:
1527:
1525:
1522:
1520:
1517:
1515:
1512:
1510:
1507:
1505:
1502:
1500:
1497:
1494:
1490:
1487:
1485:
1482:
1480:
1477:
1475:
1472:
1470:
1467:
1465:
1462:
1460:
1457:
1455:
1452:
1450:
1447:
1445:
1442:
1440:
1437:
1435:
1432:
1430:
1429:Google Chrome
1427:
1426:
1424:
1421:
1417:
1413:
1406:
1402:
1388:
1385:
1383:
1380:
1378:
1375:
1369:
1366:
1365:
1364:
1361:
1359:
1356:
1355:
1354:
1351:
1350:
1348:
1344:
1336:
1333:
1331:
1328:
1326:
1323:
1321:
1318:
1316:
1313:
1312:
1311:
1308:
1306:
1303:
1301:
1298:
1294:
1291:
1290:
1289:
1286:
1285:
1283:
1281:
1280:Web standards
1277:
1271:
1268:
1266:
1263:
1261:
1258:
1257:
1255:
1251:
1247:
1240:
1237:
1234:
1233:
1230:
1226:
1222:
1215:
1210:
1208:
1203:
1201:
1196:
1195:
1192:
1180:
1172:
1171:
1168:
1162:
1159:
1156:
1154:
1151:
1149:
1146:
1144:
1141:
1140:
1138:
1134:
1128:
1127:
1123:
1121:
1120:
1116:
1114:
1113:
1109:
1107:
1106:Download.ject
1104:
1102:
1099:
1097:
1094:
1093:
1091:
1087:
1081:
1078:
1076:
1073:
1071:
1068:
1066:
1063:
1061:
1058:
1056:
1053:
1051:
1048:
1046:
1043:
1041:
1038:
1036:
1033:
1031:
1028:
1026:
1025:DirectX Media
1023:
1021:
1018:
1016:
1013:
1011:
1008:
1006:
1003:
1001:
998:
997:
995:
991:
983:
980:
979:
978:
975:
973:
970:
968:
965:
963:
960:
958:
955:
954:
952:
948:
942:
939:
937:
934:
932:
929:
927:
924:
922:
919:
917:
914:
912:
909:
907:
904:
902:
899:
897:
894:
892:
889:
887:
884:
882:
879:
875:
872:
870:
867:
866:
865:
862:
860:
857:
855:
852:
851:
849:
845:
839:
836:
834:
831:
829:
826:
824:
821:
819:
816:
814:
811:
809:
806:
805:
803:
799:
789:
786:
784:
783:
779:
777:
776:
772:
770:
769:
765:
764:
762:
758:
752:
749:
747:
744:
742:
739:
737:
734:
732:
729:
727:
724:
722:
719:
717:
714:
712:
709:
707:
704:
702:
699:
698:
696:
692:
689:
687:
683:
679:
672:
667:
665:
660:
658:
653:
652:
649:
642:. 2015-09-18.
641:
637:
636:
631:
630:
625:
620:
619:
614:
610:
605:
604:
600:
584:
583:
578:
572:
569:
557:
556:
551:
545:
542:
531:
524:
521:
510:on 2015-02-11
509:
505:
504:
499:
493:
490:
479:
472:
469:
458:on 2021-04-14
457:
453:
447:
444:
432:
426:
423:
411:
405:
402:
391:
390:
385:
378:
375:
364:on 2007-03-07
363:
359:
358:Documentation
357:
352:
346:
343:
336:
334:
331:
329:
323:
320:
310:
307:
306:DNS hijacking
303:
300:
297:
293:
290:
289:
288:
281:
276:
272:
269:
267:than its own.
265:
261:
258:
254:
251:
247:
243:
236:
232:
229:
225:
222:
218:
217:
216:
210:
208:
206:
201:
199:
195:
190:
188:
184:
179:
176:
174:
169:
163:
161:
159:
155:
150:
148:
140:
137:
134:
131:
130:
129:
127:
122:
117:
115:
111:
103:
100:
97:
96:
95:
89:
87:
85:
81:
77:
73:
69:
65:
61:
57:
53:
45:
43:
41:
37:
33:
19:
2352:Web browsers
2295:WorldWideWeb
2010:MediaBrowser
2005:GreenBrowser
1886:Firefox Lite
1792:Discontinued
1270:Privacy mode
1221:Web browsers
1161:Inori Aizawa
1157:Scott Isaacs
1143:Tantek Çelik
1124:
1118:
1111:
1040:MSN Explorer
911:RSS Platform
847:Technologies
780:
773:
766:
627:
612:
587:. Retrieved
585:. 2016-10-06
580:
571:
560:. Retrieved
553:
544:
533:. Retrieved
523:
512:. Retrieved
508:the original
501:
492:
481:. Retrieved
471:
460:. Retrieved
456:the original
446:
435:. Retrieved
433:. 2006-10-16
425:
414:. Retrieved
412:. 2009-08-05
404:
393:. Retrieved
387:
377:
366:. Retrieved
362:the original
354:
345:
332:
324:
315:
285:
274:
245:
214:
211:Requirements
202:
191:
186:
182:
180:
177:
172:
170:
167:
151:
144:
125:
118:
107:
93:
80:Oracle Corp.
58:in 1996 for
49:
31:
29:
2321:Comparisons
2280:ThunderHawk
2260:NetPositive
2200:Edge Legacy
2129:WebPositive
2094:Opera Coast
1956:Swiftweasel
1719:qutebrowser
1608:Tor Browser
1603:SlimBrowser
1368:third-party
1320:Web storage
1315:WebAssembly
1010:ActiveMovie
881:favicon.ico
854:Accelerator
147:example.com
121:web browser
2341:Categories
1966:Timberwolf
1961:TenFourFox
1906:Kazehakase
1896:Ghostzilla
1765:Opera Mini
1699:DuckDuckGo
1588:GNU IceCat
1358:Encryption
1310:JavaScript
1265:Extensions
1050:NetMeeting
916:Smart tags
828:Extensions
589:2017-05-02
562:2015-02-10
535:2015-02-10
514:2015-02-10
483:2015-02-10
462:2015-02-10
437:2015-02-10
416:2015-02-10
395:2015-02-10
368:2015-02-10
337:References
2245:Line Mode
2069:Google TV
2025:SpaceTime
2020:NetCaptor
2015:NeoPlanet
1901:IceDragon
1876:Classilla
1709:Lunascape
1704:Konqueror
1665:GNOME Web
1634:SeaMonkey
1629:Pale Moon
1593:LibreWolf
1544:ungoogled
1534:Supermium
1387:WebSocket
1346:Protocols
1325:IndexedDB
1260:Bookmarks
1241:protocols
1238:standards
931:Web Slice
891:Index.dat
886:HTML+TIME
818:Box model
788:IEs4Linux
629:Microsoft
312:Internet.
235:MIME type
205:Konqueror
194:MIME type
187:proxy.pac
2316:Category
2270:Skweezer
2265:Netscape
2190:Deepfish
2134:xombrero
1951:Swiftfox
1881:Conkeror
1837:SalamWeb
1832:Rockmelt
1745:Ladybird
1714:NetFront
1639:Waterfox
1624:K-Meleon
1619:Basilisk
1524:Sleipnir
1434:Chromium
1253:Features
1235:Features
1179:Category
1070:Spyglass
801:Overview
782:for UNIX
686:Versions
282:Security
259:article.
246:wpad.dat
228:Web page
183:wpad.dat
56:Netscape
2275:Skyfire
2230:IBrowse
2215:HotJava
2210:Gazelle
2160:Arachne
2089:OmniWeb
2079:Mercury
2059:Dolphin
2000:Deepnet
1842:Sputnik
1827:Redcore
1760:NetSurf
1578:Firefox
1549:Vivaldi
1504:Puffin
1479:Maxthon
1454:Coc Coc
1363:Cookies
1055:NetShow
896:JScript
859:ActiveX
833:Removal
813:Add-ons
808:History
775:for Mac
582:US-CERT
319:Kiwicon
220:server.
158:NetBIOS
116:(DNS):
90:Context
46:History
38:and/or
2290:WinWAP
2285:Vision
2255:MSN TV
2250:Mosaic
2240:KidZui
2205:ELinks
2180:Charon
2170:Blazer
2109:Shiira
2099:Origyn
2042:-based
2040:WebKit
1983:-based
1981:MSHTML
1946:Strata
1926:Minimo
1921:MicroB
1891:Galeon
1871:Camino
1866:Beonex
1859:-based
1817:Citrio
1812:Beaker
1805:-based
1686:engine
1684:Multi-
1660:Safari
1653:-based
1651:WebKit
1612:Gecko
1598:Midori
1583:Floorp
1571:-based
1559:Yandex
1529:SRWare
1493:Mobile
1474:Falkon
1464:Dooble
1459:Comodo
1422:-based
1409:Active
1382:WebRTC
1335:WebGPU
1136:People
1089:Events
982:Chakra
977:MSHTML
972:Tasman
838:Shells
768:Mobile
74:, and
2195:Dillo
2165:Arena
2155:Amaya
2150:abaco
2143:Other
2114:Steel
2104:QtWeb
2064:Fluid
2049:Arora
1916:Lotus
1857:Gecko
1847:Torch
1822:Flock
1803:Blink
1750:Links
1728:Other
1675:Orion
1614:forks
1569:Gecko
1554:Whale
1499:Otter
1489:Opera
1449:Brave
1444:Avast
1420:Blink
1330:WebGL
906:MSXML
901:MHTML
760:Other
164:Notes
78:(now
2326:List
2175:Cake
2124:Uzbl
2119:surf
2074:Iris
2054:BOLT
1941:Pogo
1911:Kylo
1755:Lynx
1740:Flow
1670:iCab
1519:Silk
1469:Epic
1377:OCSP
1353:HTTP
1288:HTML
936:WPAD
864:HTML
694:Main
389:IETF
192:The
173:wpad
149:".)
36:DHCP
30:The
2030:ZAC
1995:AOL
1770:w3m
1735:eww
1694:360
1439:Arc
1305:DOM
1300:CSS
869:HTA
503:KDE
237:of
40:DNS
2343::
2185:CM
1971:xB
1539:UC
1509:QQ
1293:v5
751:11
746:10
626:.
611:.
579:.
552:.
500:.
386:.
353:.
86:.
70:,
66:,
1495:)
1491:(
1213:e
1206:t
1199:v
741:9
736:8
731:7
726:6
721:5
716:4
711:3
706:2
701:1
670:e
663:t
656:v
632:.
615:.
592:.
565:.
538:.
517:.
486:.
465:.
440:.
419:.
398:.
371:.
252:.
241:.
230:.
20:)
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.