Post #2041253

2026-03-04 06:52 UTC

@anfragment @Kerplunk @QuercusMacrocarpa @ublockorigin looks like you’re allow-listing OpenAI in zen-https-exclusions/common.txt (line 117/118)? Wouldn’t that mean that it wouldn’t provide protection while using ChatGPT via browser? Don’t get me wrong, I think it’s a wonderful idea, and your implementation actually looks very solid, but it doesn’t look like it would protect privacy within the context of my original post (unless I’m misunderstanding something, in which case please do correct me and tell me to RTFM or GTFO).

Replies (2)

@Kerplunk@mastodon.scot 2026-03-04 09:05

@k3ym0 @anfragment @QuercusMacrocarpa @ublockorigin Wouldn’t that mean that it wouldn’t provide protection while using ChatGPT via browser? Thank you for heads up. will look in to the allow listings and have added https://github.com/Stevoisiak/Stevos-GenAI-Blocklist/ I have 0.0.0.0 chat.openai.com in etc/hosts as a belt and braces approach.

Open ##2041254
@anfragment@mastodon.social 2026-03-04 22:15

@k3ym0 @Kerplunk @QuercusMacrocarpa @ublockorigin We added those exclusions because the desktop ChatGPT app complains loudly about MITM, and we'd rather avoid people disabling Zen completely out of frustration. On the telemetry endpoints: thank you for flagging ab.chatgpt.com - I've added a scriptlet similar to uBO's to our filter list and the requests are now blocked: https://github.com/ZenPrivacy/filter-lists/commit/1a1b3c045138abc66d0b47a900f9ed071461d244 Requests to GA were blocked already. Going through other ones in the original post as well.

Open ##2041255