Do tor in dvm even connect to https by default?! I had to set that setting just now. It did connect to http by default and if that’s the case it’s an security issue on this OS. By default.
How do i change that?
Rephrase your question in more detail, I don’t understand what you’re talking about.
Do you mean a disposableVM based on whonix-ws-16-dvm disposable template? Which website did you try to enter? I tried http://httpforever.com/ and it did not let me in.
Oh, actually it’s opened now, without a warning. Indeed looks like a problem to me. This is not related to Qubes but to Whonix, which have their own support forum:
Please ask there.
Why doesn’t Tor browser block HTTP by default?
It’s not enabled by default because it would block a significant fraction of the Internet for users. Blocking HTTP-only traffic will likely come in the future once Tor Browser is using a version of Firefox with HTTPS-only mode, and once the developers feel they can do it while minimizing the usability impact (for example providing documentation to explain why it was blocked, allowing the user to bypass the block, etc).
Individual-resistance: HTTPS by default (#40294) · Issues · The Tor Project / Applications / Tor Browser · GitLab
Disable Plaintext HTTP Clearnet Connections (#19850) · Issues · The Tor Project / Applications / Tor Browser · GitLab
1 Like
Why would whonix ever connect to http instead of https? That would break the encryption. Nah maybe someone else can ask instead… thanks
There should be warnings… they should block it by default. Who uses http in 2022 and why 
Imagine creating a website and let it use http. haha
It’s kinda funny. 2advanced.com as random example with the newest tech news. In http.
It’s like someone would have the most expensive car in the world and a big sticker on the back window that says:
“I voted for trump.”
Don’t want to get political but you get me.