&gt; DNS queries are not leaked.<p>I imagine that you mean the proxy takes care of resolving hosts. For example, requesting <a href="https:&#x2F;&#x2F;google.com" rel="nofollow">https:&#x2F;&#x2F;google.com</a> doesn&#x27;t resolve google.com. on the client, rather it sends a request for <a href="https:&#x2F;&#x2F;google.com" rel="nofollow">https:&#x2F;&#x2F;google.com</a> to the proxy server and the proxy server resolves google.com.<p>Attacking the DNS lookup for the proxy itself won&#x27;t work because the attacker would need the SSL certificate for the proxy. Hopefully Opera has pinned that certificate (or better, its signer), which prevents a rogue CA attack.