Does tails have a penetrable firewall?
Currently tails firewall has a very complicated structure to it. It is difficult to say if the firewall is penetrable or not. One might think it is not when it is.
Currently tails firewall allows both encrypted and unencrypted TCP data to go through it. This is evident as tails still has the unsecured browser. Tails may be made a more secure OS by preventing the firewall from allowing unencrypted data. This may prevent a local hack against tails or an attack directed against tails from the ISP or an attacker hacking the ISP to hack a tails OS. There are some OS that are used on routers that can route based on protocol. It may be possible to route of TLS/SSL data. This is called policy based routing. Policy based routing is present in DD-WRT routers. This routing method combined with dropping all the packets that are not in the policy may result in a pure encrypted data. I am not saying to make tails a routing OS but use something similar to this function to make tails OS more secure. Using this in tails OS or something similar like that may prevent the unintended (unencrypted) data packets from getting through the firewall in tails OS. This may make tails a more secure OS. Yes this will mean that the unsecured browser will need to be removed from the tails OS. I believe that the Unsecured browser is hardly used on tails and would not be missed. I for one have never used it. If you need to keep the unsafe browser for captive portals then you could may be have it be included as an option on start up like the browser used for hidden services and start tails in an unsecured mode.
Would it be more secure if tails were to drop all TCP unencrypted data? Could this be done to tails firewall?