03-29-05 07:45 AM
on 27 Mar 2005, Anonymous via Panta Rhei
<anonymous@panta-rhei.dyndns.org> wrote in
news:XAMF4LX638439.2194444444@anonymous.poster:
> In article <0019626923076115nobodynobodycom@82.133.6.116>,
> nobody wrote:
>
excuse me, but apparently you have not read the posts on the topic
the original poster is referring to? Instead you bring up irrelevant
topics that were never discussed. OP is correct, Privoxy does NOT
filter ssl env variables which, of course, is what many sysops use to
identify users. Javascript, cookies, etc, can be turned off and the
end host will still get your env. variables unders ssl connection.
Take another program which actually DOES filter ssl connections and
you are ok. Not so with Privoxy. Privoxy offers variables in the
config file to change or cloak you env variables, but they do not
work under ssl. Privoxy is not so private.
> excuse me, but privoxy does not CLAIM to re-encrypt anything.
> it has USER CONFIGURABLE filter actions that CAN BE USED to
> filter script languages and outgoing http headers and such. The
> MAIN thing Tor users use it for is both that filtering, and the
> fact that it forces all http, https and DNS requests to be
> routed through Tor to prevent leakage of Identifying
> information.
>
> These can be very powerfull tools *IF* the user does not defeat
> them by either not setting them up correctly OR by disableing
> certain features. If you set privoxy to not rewrite javascript
> for example, then it is YOUR FAULT if somebody gets your real
> I.P. Address with a javascript trick.
>
> Are they using flash to do it? then turn flash OFF. ditto for
> java, vbs or any other scripting language. when you want
> private surfing you cannot afford to use security leaks like
> that, you want NOTHING but pure html 4.01 strict.
>
[ Post a follow-up to this message ]
|