Please RTM!...Re: Please don't recommend Tor Button!

[Fabian Keil]

light zoo <lightzook at yahoo.com> wrote:

> --- JT <toruser at fastmail.fm> wrote:

> > recommending the Tor Button is a security/anonymity
> > hazard. Clicking on
> > the Tor button will automatically remove the ftp
> > and gopher proxy in firefox for example. 
> 
> These are not used with Tor and that is why the port
> is zero.  TorButton is a great extension, it is
> configured correctly and the Tor devs. recommend it,
> as do I.
> 
> Please read up on Tor before sending emails to the
> list, it can confuse people.

Could you post a pointer to the part of the Tor
documentation that you're referring to?

The relevant parts of the documentation that
I'm aware of recommend to set the gopher and
ftp proxy settings to Privoxy, to make sure
those requests fail instead of bypassing Tor:

http://tor.eff.org/docs/tor-doc-web.html.en
http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#FtpProxy

If the Tor button extension would indeed
remove these settings permanently, I'd consider
JT's concerns valid.

Fabian
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
URL: <http://lists.torproject.org/pipermail/tor-talk/attachments/20070328/ad58df9f/attachment.pgp>