Is real public IP Address hidden when using a system wide proxy in Windows 10?VPN client sees LAN computers but cannot connect to Internet via VPNIn windows 8, my proxy server settings get enabled automatically, how do I turn this off?web filter issue of my Telecom ISPWindows host file being ignored when using VPN or proxyDirecting VPN and RDP traffic through wireless connectionCreating log of when computer loses internet connectionCreate VPN server to tunnel traffic thru external proxy serverHow would I use HTTP proxies and virtual network interfaces with multiple VPN connections?Reset proxy settings by using a scriptOSX how to check if a specific app is leaking real ip when computer connected to VPN

Comma Code - Ch. 4 Automate the Boring Stuff

If a problem only occurs randomly once in every N times on average, how many tests do I have to perform to be certain that it's now fixed?

Does Peach's float negate shorthop knockback multipliers?

How to decline physical affection from a child whose parents are pressuring them?

Restoring order in a deck of playing cards (II)

PhD student with mental health issues and bad performance

What is a simple, physical situation where complex numbers emerge naturally?

Can a helicopter mask itself from radar?

I made a mistake ordering ground coffee - will Expresso ground coffee work for a French Press?

Have powerful mythological heroes ever run away or been deeply afraid?

How can I grammatically understand "Wir über uns"?

Is it a problem that pull requests are approved without any comments

Is there a term for this?

What if you don't bring your credit card or debit for incidentals?

Do I add my ability modifier to the damage of the bonus-action attack granted by the Crossbow Expert feat?

The term for the person/group a political party aligns themselves with to appear concerned about the general public

How to detach yourself from a character you're going to kill?

Relativistic resistance transformation

Was the 1959 Tibetan Uprising really an uprising?

What does War Machine's "Canopy! Canopy!" line mean in "Avengers: Endgame"?

Filling region bounded by multiple paths

Can those paralyzed by the Hold Person spell be forcibly moved?

Is there a way to save this session?

Can a magnetic field of a large body be stronger than its gravity?



Is real public IP Address hidden when using a system wide proxy in Windows 10?


VPN client sees LAN computers but cannot connect to Internet via VPNIn windows 8, my proxy server settings get enabled automatically, how do I turn this off?web filter issue of my Telecom ISPWindows host file being ignored when using VPN or proxyDirecting VPN and RDP traffic through wireless connectionCreating log of when computer loses internet connectionCreate VPN server to tunnel traffic thru external proxy serverHow would I use HTTP proxies and virtual network interfaces with multiple VPN connections?Reset proxy settings by using a scriptOSX how to check if a specific app is leaking real ip when computer connected to VPN






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;








12















For example if I am using a free VPN(I know vpn and proxy not the same) and it looses the connection, for this short period of time my real IP is exposed, before connecting back to VPN again.



Does this occur if I am using proxy server setup in Windows 10 settings?



Settings -> Network & Internet -> Proxy



OR



Internetoptions -> “Connections” -> “LAN-Settings”->“Extended Options”



If yes, can I somehow prevent it from doing so.










share|improve this question









New contributor



Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.

























    12















    For example if I am using a free VPN(I know vpn and proxy not the same) and it looses the connection, for this short period of time my real IP is exposed, before connecting back to VPN again.



    Does this occur if I am using proxy server setup in Windows 10 settings?



    Settings -> Network & Internet -> Proxy



    OR



    Internetoptions -> “Connections” -> “LAN-Settings”->“Extended Options”



    If yes, can I somehow prevent it from doing so.










    share|improve this question









    New contributor



    Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.





















      12












      12








      12


      1






      For example if I am using a free VPN(I know vpn and proxy not the same) and it looses the connection, for this short period of time my real IP is exposed, before connecting back to VPN again.



      Does this occur if I am using proxy server setup in Windows 10 settings?



      Settings -> Network & Internet -> Proxy



      OR



      Internetoptions -> “Connections” -> “LAN-Settings”->“Extended Options”



      If yes, can I somehow prevent it from doing so.










      share|improve this question









      New contributor



      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.











      For example if I am using a free VPN(I know vpn and proxy not the same) and it looses the connection, for this short period of time my real IP is exposed, before connecting back to VPN again.



      Does this occur if I am using proxy server setup in Windows 10 settings?



      Settings -> Network & Internet -> Proxy



      OR



      Internetoptions -> “Connections” -> “LAN-Settings”->“Extended Options”



      If yes, can I somehow prevent it from doing so.







      networking windows-10 vpn proxy






      share|improve this question









      New contributor



      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share|improve this question









      New contributor



      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share|improve this question




      share|improve this question








      edited May 24 at 18:27









      Nikhil_CV

      536315




      536315






      New contributor



      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      asked May 24 at 17:05









      OjavOjav

      613




      613




      New contributor



      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.




      New contributor




      Ojav is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          4 Answers
          4






          active

          oldest

          votes


















          12














          If you have the habit of using a VPN and are worried about being disconnected,
          then there are VPN products that will start with Windows and that will
          not allow any Internet connection that is not via the VPN.



          Search in the VPN product you are using for such a setting, or change to another
          product.



          This gizmo article might help:
          Best VPN Services for 2019.






          share|improve this answer
































            10














            No. The proxy settings are 1) completely optional, 2) not applicable to most non-HTTP-based protocols. (For example, protocols built on top of UDP are outright incompatible with HTTP proxies.)






            share|improve this answer






























              4














              Other people have discussed the network side, so I will point out a different issue: Applications.



              Even if you could set up an airtight network setup where your public IP is never exposed, that doesnt guarantee that an application you are running doesnt expose it. Even a program from a developer you trust can accidentally expose your information. An application might have a security flaw, a bug, the user misconfigured it, or even by design, which exposes the public IP of the user. Here is one example of this.



              Unless you can sniff the unexcrypted packets being sent by an application, its really hard to tell what information they are sending.






              share|improve this answer























              • This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                – Kevin
                May 25 at 4:55












              • @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                – Keltari
                May 26 at 16:58











              • @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                – grawity
                May 27 at 6:27


















              3















              Does this occur if I am using proxy server setup in Windows 10 settings?




              Yes.




              If yes, can I somehow prevent it from doing so.




              No.



              There are several reasons for this:



              The way a proxy works, is that instead of connecting to the server directly, you connect to the proxy and the proxy connects to the server. In order to do this, the proxy needs to understand the protocol you are using to connect to the server.



              The particular settings you are talking about, are for web proxies, i.e. proxies that implement proxying for typical web protocols such as HTTP, HTTPS, FTP, FTPS, WS, WSS, and Gopher.



              So, that should already tell you the first limitation: it only works for a limited set of protocols, i.e. for web protocols, IOW it only works for web browsing and related things, and not, for example, for Email, or Skype, or Teamspeak, or multiplayer games, or a myriad of other protocols.



              Also, in order for the proxy to be used, an application has to actually, well, use the proxy. Internet Explorer and Edge, for example, they read those settings you talked about, but not every browser does. Some browsers have their own, browser-specific proxy settings.



              Lastly, the protocol itself could contain the original IP address (or other identifying data) in encrypted form, and there is nothing the proxy can do about that. For example, the WhatsApp Messenger uses end-to-end encryption, so the proxy can not look inside the protocol. And the protocol is proprietary, so nobody knows what it actually sends. It is entirely possible that it might send the original IP address, or the telephone number.



              So, in short:



              1. The use of the proxy is completely voluntary. Only applications which read those settings and want to use the proxy will use it.

              2. The proxy generally only works for web protocols.

              3. Applications may still send the IP address as part of the application protocol.





              share|improve this answer




















              • 1





                There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                – dave_thompson_085
                May 25 at 7:36







              • 1





                ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                – dave_thompson_085
                May 25 at 7:37











              • @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                – Jörg W Mittag
                May 25 at 7:50











              Your Answer








              StackExchange.ready(function()
              var channelOptions =
              tags: "".split(" "),
              id: "3"
              ;
              initTagRenderer("".split(" "), "".split(" "), channelOptions);

              StackExchange.using("externalEditor", function()
              // Have to fire editor after snippets, if snippets enabled
              if (StackExchange.settings.snippets.snippetsEnabled)
              StackExchange.using("snippets", function()
              createEditor();
              );

              else
              createEditor();

              );

              function createEditor()
              StackExchange.prepareEditor(
              heartbeatType: 'answer',
              autoActivateHeartbeat: false,
              convertImagesToLinks: true,
              noModals: true,
              showLowRepImageUploadWarning: true,
              reputationToPostImages: 10,
              bindNavPrevention: true,
              postfix: "",
              imageUploader:
              brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
              contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
              allowUrls: true
              ,
              onDemand: true,
              discardSelector: ".discard-answer"
              ,immediatelyShowMarkdownHelp:true
              );



              );






              Ojav is a new contributor. Be nice, and check out our Code of Conduct.









              draft saved

              draft discarded


















              StackExchange.ready(
              function ()
              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1440863%2fis-real-public-ip-address-hidden-when-using-a-system-wide-proxy-in-windows-10%23new-answer', 'question_page');

              );

              Post as a guest















              Required, but never shown

























              4 Answers
              4






              active

              oldest

              votes








              4 Answers
              4






              active

              oldest

              votes









              active

              oldest

              votes






              active

              oldest

              votes









              12














              If you have the habit of using a VPN and are worried about being disconnected,
              then there are VPN products that will start with Windows and that will
              not allow any Internet connection that is not via the VPN.



              Search in the VPN product you are using for such a setting, or change to another
              product.



              This gizmo article might help:
              Best VPN Services for 2019.






              share|improve this answer





























                12














                If you have the habit of using a VPN and are worried about being disconnected,
                then there are VPN products that will start with Windows and that will
                not allow any Internet connection that is not via the VPN.



                Search in the VPN product you are using for such a setting, or change to another
                product.



                This gizmo article might help:
                Best VPN Services for 2019.






                share|improve this answer



























                  12












                  12








                  12







                  If you have the habit of using a VPN and are worried about being disconnected,
                  then there are VPN products that will start with Windows and that will
                  not allow any Internet connection that is not via the VPN.



                  Search in the VPN product you are using for such a setting, or change to another
                  product.



                  This gizmo article might help:
                  Best VPN Services for 2019.






                  share|improve this answer















                  If you have the habit of using a VPN and are worried about being disconnected,
                  then there are VPN products that will start with Windows and that will
                  not allow any Internet connection that is not via the VPN.



                  Search in the VPN product you are using for such a setting, or change to another
                  product.



                  This gizmo article might help:
                  Best VPN Services for 2019.







                  share|improve this answer














                  share|improve this answer



                  share|improve this answer








                  edited May 25 at 8:28

























                  answered May 24 at 18:41









                  harrymcharrymc

                  269k14279597




                  269k14279597























                      10














                      No. The proxy settings are 1) completely optional, 2) not applicable to most non-HTTP-based protocols. (For example, protocols built on top of UDP are outright incompatible with HTTP proxies.)






                      share|improve this answer



























                        10














                        No. The proxy settings are 1) completely optional, 2) not applicable to most non-HTTP-based protocols. (For example, protocols built on top of UDP are outright incompatible with HTTP proxies.)






                        share|improve this answer

























                          10












                          10








                          10







                          No. The proxy settings are 1) completely optional, 2) not applicable to most non-HTTP-based protocols. (For example, protocols built on top of UDP are outright incompatible with HTTP proxies.)






                          share|improve this answer













                          No. The proxy settings are 1) completely optional, 2) not applicable to most non-HTTP-based protocols. (For example, protocols built on top of UDP are outright incompatible with HTTP proxies.)







                          share|improve this answer












                          share|improve this answer



                          share|improve this answer










                          answered May 24 at 18:27









                          grawitygrawity

                          249k38526586




                          249k38526586





















                              4














                              Other people have discussed the network side, so I will point out a different issue: Applications.



                              Even if you could set up an airtight network setup where your public IP is never exposed, that doesnt guarantee that an application you are running doesnt expose it. Even a program from a developer you trust can accidentally expose your information. An application might have a security flaw, a bug, the user misconfigured it, or even by design, which exposes the public IP of the user. Here is one example of this.



                              Unless you can sniff the unexcrypted packets being sent by an application, its really hard to tell what information they are sending.






                              share|improve this answer























                              • This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                                – Kevin
                                May 25 at 4:55












                              • @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                                – Keltari
                                May 26 at 16:58











                              • @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                                – grawity
                                May 27 at 6:27















                              4














                              Other people have discussed the network side, so I will point out a different issue: Applications.



                              Even if you could set up an airtight network setup where your public IP is never exposed, that doesnt guarantee that an application you are running doesnt expose it. Even a program from a developer you trust can accidentally expose your information. An application might have a security flaw, a bug, the user misconfigured it, or even by design, which exposes the public IP of the user. Here is one example of this.



                              Unless you can sniff the unexcrypted packets being sent by an application, its really hard to tell what information they are sending.






                              share|improve this answer























                              • This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                                – Kevin
                                May 25 at 4:55












                              • @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                                – Keltari
                                May 26 at 16:58











                              • @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                                – grawity
                                May 27 at 6:27













                              4












                              4








                              4







                              Other people have discussed the network side, so I will point out a different issue: Applications.



                              Even if you could set up an airtight network setup where your public IP is never exposed, that doesnt guarantee that an application you are running doesnt expose it. Even a program from a developer you trust can accidentally expose your information. An application might have a security flaw, a bug, the user misconfigured it, or even by design, which exposes the public IP of the user. Here is one example of this.



                              Unless you can sniff the unexcrypted packets being sent by an application, its really hard to tell what information they are sending.






                              share|improve this answer













                              Other people have discussed the network side, so I will point out a different issue: Applications.



                              Even if you could set up an airtight network setup where your public IP is never exposed, that doesnt guarantee that an application you are running doesnt expose it. Even a program from a developer you trust can accidentally expose your information. An application might have a security flaw, a bug, the user misconfigured it, or even by design, which exposes the public IP of the user. Here is one example of this.



                              Unless you can sniff the unexcrypted packets being sent by an application, its really hard to tell what information they are sending.







                              share|improve this answer












                              share|improve this answer



                              share|improve this answer










                              answered May 24 at 19:07









                              KeltariKeltari

                              52.3k18120171




                              52.3k18120171












                              • This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                                – Kevin
                                May 25 at 4:55












                              • @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                                – Keltari
                                May 26 at 16:58











                              • @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                                – grawity
                                May 27 at 6:27

















                              • This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                                – Kevin
                                May 25 at 4:55












                              • @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                                – Keltari
                                May 26 at 16:58











                              • @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                                – grawity
                                May 27 at 6:27
















                              This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                              – Kevin
                              May 25 at 4:55






                              This is a little pessimistic. You could combine the VPN with some kind of NAT-like contraption, so that the only device aware of the "public IP" is the router(?) that is implementing the combined VPN/NAT functionality. The PC gets a private IP and has no idea it's even on a VPN. The private IP could be exposed, but since lots of IPv4 hosts are on NATs anyway, that's not terribly interesting to the average attacker.

                              – Kevin
                              May 25 at 4:55














                              @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                              – Keltari
                              May 26 at 16:58





                              @Kevin pessimistic or not, its true. It might not be in every case, but it is something to be mindful of.

                              – Keltari
                              May 26 at 16:58













                              @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                              – grawity
                              May 27 at 6:27





                              @Kevin: It becomes quite interesting when the network also runs IPv6 (as the app might accidentally report your global IPv6 prefix).

                              – grawity
                              May 27 at 6:27











                              3















                              Does this occur if I am using proxy server setup in Windows 10 settings?




                              Yes.




                              If yes, can I somehow prevent it from doing so.




                              No.



                              There are several reasons for this:



                              The way a proxy works, is that instead of connecting to the server directly, you connect to the proxy and the proxy connects to the server. In order to do this, the proxy needs to understand the protocol you are using to connect to the server.



                              The particular settings you are talking about, are for web proxies, i.e. proxies that implement proxying for typical web protocols such as HTTP, HTTPS, FTP, FTPS, WS, WSS, and Gopher.



                              So, that should already tell you the first limitation: it only works for a limited set of protocols, i.e. for web protocols, IOW it only works for web browsing and related things, and not, for example, for Email, or Skype, or Teamspeak, or multiplayer games, or a myriad of other protocols.



                              Also, in order for the proxy to be used, an application has to actually, well, use the proxy. Internet Explorer and Edge, for example, they read those settings you talked about, but not every browser does. Some browsers have their own, browser-specific proxy settings.



                              Lastly, the protocol itself could contain the original IP address (or other identifying data) in encrypted form, and there is nothing the proxy can do about that. For example, the WhatsApp Messenger uses end-to-end encryption, so the proxy can not look inside the protocol. And the protocol is proprietary, so nobody knows what it actually sends. It is entirely possible that it might send the original IP address, or the telephone number.



                              So, in short:



                              1. The use of the proxy is completely voluntary. Only applications which read those settings and want to use the proxy will use it.

                              2. The proxy generally only works for web protocols.

                              3. Applications may still send the IP address as part of the application protocol.





                              share|improve this answer




















                              • 1





                                There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                                – dave_thompson_085
                                May 25 at 7:36







                              • 1





                                ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                                – dave_thompson_085
                                May 25 at 7:37











                              • @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                                – Jörg W Mittag
                                May 25 at 7:50















                              3















                              Does this occur if I am using proxy server setup in Windows 10 settings?




                              Yes.




                              If yes, can I somehow prevent it from doing so.




                              No.



                              There are several reasons for this:



                              The way a proxy works, is that instead of connecting to the server directly, you connect to the proxy and the proxy connects to the server. In order to do this, the proxy needs to understand the protocol you are using to connect to the server.



                              The particular settings you are talking about, are for web proxies, i.e. proxies that implement proxying for typical web protocols such as HTTP, HTTPS, FTP, FTPS, WS, WSS, and Gopher.



                              So, that should already tell you the first limitation: it only works for a limited set of protocols, i.e. for web protocols, IOW it only works for web browsing and related things, and not, for example, for Email, or Skype, or Teamspeak, or multiplayer games, or a myriad of other protocols.



                              Also, in order for the proxy to be used, an application has to actually, well, use the proxy. Internet Explorer and Edge, for example, they read those settings you talked about, but not every browser does. Some browsers have their own, browser-specific proxy settings.



                              Lastly, the protocol itself could contain the original IP address (or other identifying data) in encrypted form, and there is nothing the proxy can do about that. For example, the WhatsApp Messenger uses end-to-end encryption, so the proxy can not look inside the protocol. And the protocol is proprietary, so nobody knows what it actually sends. It is entirely possible that it might send the original IP address, or the telephone number.



                              So, in short:



                              1. The use of the proxy is completely voluntary. Only applications which read those settings and want to use the proxy will use it.

                              2. The proxy generally only works for web protocols.

                              3. Applications may still send the IP address as part of the application protocol.





                              share|improve this answer




















                              • 1





                                There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                                – dave_thompson_085
                                May 25 at 7:36







                              • 1





                                ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                                – dave_thompson_085
                                May 25 at 7:37











                              • @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                                – Jörg W Mittag
                                May 25 at 7:50













                              3












                              3








                              3








                              Does this occur if I am using proxy server setup in Windows 10 settings?




                              Yes.




                              If yes, can I somehow prevent it from doing so.




                              No.



                              There are several reasons for this:



                              The way a proxy works, is that instead of connecting to the server directly, you connect to the proxy and the proxy connects to the server. In order to do this, the proxy needs to understand the protocol you are using to connect to the server.



                              The particular settings you are talking about, are for web proxies, i.e. proxies that implement proxying for typical web protocols such as HTTP, HTTPS, FTP, FTPS, WS, WSS, and Gopher.



                              So, that should already tell you the first limitation: it only works for a limited set of protocols, i.e. for web protocols, IOW it only works for web browsing and related things, and not, for example, for Email, or Skype, or Teamspeak, or multiplayer games, or a myriad of other protocols.



                              Also, in order for the proxy to be used, an application has to actually, well, use the proxy. Internet Explorer and Edge, for example, they read those settings you talked about, but not every browser does. Some browsers have their own, browser-specific proxy settings.



                              Lastly, the protocol itself could contain the original IP address (or other identifying data) in encrypted form, and there is nothing the proxy can do about that. For example, the WhatsApp Messenger uses end-to-end encryption, so the proxy can not look inside the protocol. And the protocol is proprietary, so nobody knows what it actually sends. It is entirely possible that it might send the original IP address, or the telephone number.



                              So, in short:



                              1. The use of the proxy is completely voluntary. Only applications which read those settings and want to use the proxy will use it.

                              2. The proxy generally only works for web protocols.

                              3. Applications may still send the IP address as part of the application protocol.





                              share|improve this answer
















                              Does this occur if I am using proxy server setup in Windows 10 settings?




                              Yes.




                              If yes, can I somehow prevent it from doing so.




                              No.



                              There are several reasons for this:



                              The way a proxy works, is that instead of connecting to the server directly, you connect to the proxy and the proxy connects to the server. In order to do this, the proxy needs to understand the protocol you are using to connect to the server.



                              The particular settings you are talking about, are for web proxies, i.e. proxies that implement proxying for typical web protocols such as HTTP, HTTPS, FTP, FTPS, WS, WSS, and Gopher.



                              So, that should already tell you the first limitation: it only works for a limited set of protocols, i.e. for web protocols, IOW it only works for web browsing and related things, and not, for example, for Email, or Skype, or Teamspeak, or multiplayer games, or a myriad of other protocols.



                              Also, in order for the proxy to be used, an application has to actually, well, use the proxy. Internet Explorer and Edge, for example, they read those settings you talked about, but not every browser does. Some browsers have their own, browser-specific proxy settings.



                              Lastly, the protocol itself could contain the original IP address (or other identifying data) in encrypted form, and there is nothing the proxy can do about that. For example, the WhatsApp Messenger uses end-to-end encryption, so the proxy can not look inside the protocol. And the protocol is proprietary, so nobody knows what it actually sends. It is entirely possible that it might send the original IP address, or the telephone number.



                              So, in short:



                              1. The use of the proxy is completely voluntary. Only applications which read those settings and want to use the proxy will use it.

                              2. The proxy generally only works for web protocols.

                              3. Applications may still send the IP address as part of the application protocol.






                              share|improve this answer














                              share|improve this answer



                              share|improve this answer








                              edited May 25 at 7:49

























                              answered May 25 at 5:28









                              Jörg W MittagJörg W Mittag

                              3781713




                              3781713







                              • 1





                                There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                                – dave_thompson_085
                                May 25 at 7:36







                              • 1





                                ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                                – dave_thompson_085
                                May 25 at 7:37











                              • @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                                – Jörg W Mittag
                                May 25 at 7:50












                              • 1





                                There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                                – dave_thompson_085
                                May 25 at 7:36







                              • 1





                                ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                                – dave_thompson_085
                                May 25 at 7:37











                              • @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                                – Jörg W Mittag
                                May 25 at 7:50







                              1




                              1





                              There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                              – dave_thompson_085
                              May 25 at 7:36






                              There are two kinds of HTTPS proxies. The classic kind, which Windows InternetOptions +IE/Edge/etc is intended to support, creates a TCP-level relay with CONNECT, see RFC2817 sec5, then does HTTPS end-to-end over that relay, so server sees the (last) proxy IP but browser gets the real cert. You are talking about the newer kind of 'proxy' that is really an interceptor used by many organizations or people to 'inspect' traffic (for things like personal use, porn, malware, secret or restricted data) and those require browser trust the interceptor's (fake) CA cert. ...

                              – dave_thompson_085
                              May 25 at 7:36





                              1




                              1





                              ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                              – dave_thompson_085
                              May 25 at 7:37





                              ... HTTP CONNECT could be used for other TCP-based protocols, but I don't know anything (at least on Windows) that does so.

                              – dave_thompson_085
                              May 25 at 7:37













                              @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                              – Jörg W Mittag
                              May 25 at 7:50





                              @dave_thompson_085: Thanks. Removed. You're right, I completely forgot about that. The last time I set up a proxy was 20 years ago, and that was a filtering proxy, so it needed access to the content of both the request and the response.

                              – Jörg W Mittag
                              May 25 at 7:50










                              Ojav is a new contributor. Be nice, and check out our Code of Conduct.









                              draft saved

                              draft discarded


















                              Ojav is a new contributor. Be nice, and check out our Code of Conduct.












                              Ojav is a new contributor. Be nice, and check out our Code of Conduct.











                              Ojav is a new contributor. Be nice, and check out our Code of Conduct.














                              Thanks for contributing an answer to Super User!


                              • Please be sure to answer the question. Provide details and share your research!

                              But avoid


                              • Asking for help, clarification, or responding to other answers.

                              • Making statements based on opinion; back them up with references or personal experience.

                              To learn more, see our tips on writing great answers.




                              draft saved


                              draft discarded














                              StackExchange.ready(
                              function ()
                              StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1440863%2fis-real-public-ip-address-hidden-when-using-a-system-wide-proxy-in-windows-10%23new-answer', 'question_page');

                              );

                              Post as a guest















                              Required, but never shown





















































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown

































                              Required, but never shown














                              Required, but never shown












                              Required, but never shown







                              Required, but never shown