The address you leave through

An address does not hide you. It places you, and everything else the browser says is read against that place, which is why a new address with an old clock is worse than no change at all.

14 में से पाठ 4

Four kinds of address

A seller labels an address by where it sits on the network, and that label is the first thing a platform can guess at. A household line and a rented machine look nothing alike from the outside.

All four kinds live in one library here and are launched the same way. What differs is the price, the reputation the address carries and how often it changes.

Home
An address on an ordinary subscriber line. Sold by the gigabyte and the hardest kind to tell apart from a real visitor.
Mobile
An address from a carrier pool shared with many real phones. It changes often and that is what it is bought for.
Server
An address from a hosting network. Cheap and fast and openly a machine rather than a household.
Your own server
A machine you already pay for, reached through a tunnel instead of bought as a proxy.

What an address proves on its own

Very little. A platform sees an address, who owns that network and which country it answers from, and none of it identifies you or clears you.

What the address does is fix a place. The value is in the pair it forms with the clock and the language of the same profile.

The clock follows the exit country

A profile does not keep your own timezone when it goes out through another country. The exit country sets the timezone and the language list the profile reports.

That country is asked through the address itself over an encrypted connection, from four providers in turn so that one refusal cannot decide an identity. The answer is kept on the profile and dropped the moment the address changes.

Exit country	Clock	Languages
Germany	Europe/Berlin	de-DE, de, en
Japan	Asia/Tokyo	ja-JP, ja, en
Brazil	America/Sao_Paulo	pt-BR, pt, en

When the country cannot be read

A free provider starts refusing during a burst of launches, and then the exit country is simply unknown. The profile still opens, because rebuilding a fingerprint afterwards would show the account a different machine.

Its clock and language stay the ones the profile generated for itself, and a warning names the profile so the gap is not silent. Nothing is remembered, so the next launch asks again.

Where a real address escapes

Not through the page you opened. The two ways out are a profile with no address at all and the side channel browsers keep for calls and video.

No address set
The profile leaves on your own line. The list says so rather than hiding it.
An address that cannot be applied
The launch stops and names the profile instead of going out directly.
Calls and video
Held to traffic that goes through the address, on both engines.
The start page lookup
Travels through the profile's own address on purpose: the answer is the exit a site would see.

How traffic reaches the exit

The exit reaches the browser as one address that covers every scheme. An encrypted page therefore cannot take a different road than a plain one.

The password does not ride on the command line, which every process under your account can read. It stays in a small relay on loopback that holds it in memory and presents it to your address.

Your own server as the exit

A server you already rent becomes an exit without buying a proxy at all. An ordinary tunnel runs beside the profile and opens a real local entrance that the browser treats like any other.

A tunnel that breaks is raised again on the same port, up to three times. If it still will not come up the pages stop loading and the profile does not fall back to your own line.

The rule worth carrying away

An address and a clock are one setting with two halves. Moving one of them alone builds a contradiction that was not there before you started.

The address goes first, the clock follows the country it answers from, and the pair gets a look before you sign in anywhere.

What this lesson does not claim

It does not claim that a matching address and clock make an account safe. They remove one contradiction, and a platform has others to read.
Clock and language follow the exit only for the countries on a fixed list. Outside that list the profile keeps what it generated for itself, and no warning is raised for that case.
ARMANOS does not sell addresses. The library stores what you bought elsewhere, and a check says the address answered a moment ago rather than that a platform will accept it.
The network sweep in the app asks your own machine about its resolver, not a profile. That is a different question from what a site sees through a profile.
Platform rules stay the platform's. Where a second account is not allowed, a matching address does not make it allowed.

Where you can see this yourself

Each claim above is one place in the code and one stand you can run.

The exit covers every scheme, so an encrypted page cannot go around it: apps/desktop/src/main/main.js · apps/desktop/test/proxy-covers-https.js
The password reaches the address through loopback and never the command line: apps/desktop/src/lib/proxyAuthBridge.js · apps/desktop/test/proxy-auth-bridge.js
The exit country is asked over an encrypted connection from four providers in turn: apps/desktop/src/lib/exitGeo.js · apps/desktop/test/exit-geo.js
A broken tunnel to your own server never becomes a direct connection: apps/desktop/src/lib/sshTunnel.js · apps/desktop/test/выход-по-ssh.js

Questions

Is a VPN an address?: It is, and usually a shared one. Many people leave through the same VPN address, which is the pattern you were trying to avoid.
Does every profile need its own address?: For accounts that must not be linked, yes. Two accounts leaving through one address is the same signal read from the other side.
Should I change the address of a profile that works?: Only for a reason. An account that suddenly answers from another country is a change worth noticing, and the clock has to move with it.
Can I keep my own timezone on a foreign address?: You can pick a timezone by hand and it wins over the exit country. It is rarely worth it: the pair is read together and a mismatch is cheap to find.
What does a check actually tell me?: That the address answers, which country and city it exits from, and the time to first response. It takes the same road a launch takes, which is why a pass means something.

Next to this

Give one profile its own way out

The knowledge base walks through storing an address and linking it to a profile.

Set a proxy Academy