replace tinyproxy with something more secure for better security

[adrelanos]

Qubes OS release

Qubes R4.2 / any

Brief summary

Replace tinyproxy for better security.

Steps to reproduce

n/a

Expected behavior

No tinyproxy installed by default.

Actual behavior

tinyproxy is installed by default.

Additional information

Is it (still) planned to port from tinyproxy to a custom solution made by Qubes? I am pretty sure I've seen Qubes developers considering this but I haven't found a dedicated ticket for this. Therefore a decision if this is planned or not would be useful.

Tickets that would get obsoleted if this is planned:

• Sandbox tinyproxy #3800

Why I am asking:

• block tinyproxy requests to 127.0.0.1, 10.137.255.254 Whonix/qubes-whonix#3 (comment)

[DemiMarie]

I wrote a tiny proxy (pun not intended) in Go that I can publish as open source. It's really something I meant for personal use, but it works for me.