Yahoo Mail and Tor

[Andrew Lewman]

On 07/09/2009 11:25 AM, Scott Bennett wrote:

> enable-remote-toggle  0
> enable-remote-http-toggle  0
> enable-edit-actions 0
> allow-cgi-request-crunching 0

I'm trying to find the email thread, but until then, even with these
set, it was demonstrated someone can manipulate your privoxy config by
making your tor client pass strings from localhost.  Again, perhaps this
issue is resolved in current privoxy versions, but I haven't looked.

>      Does polipo do all the other good things that privoxy does, including
> ad blocking and clickjack blocking?

No, and this is the point.  Polipo is a simple caching http proxy.
Polipo does include the ability to filter traffic by regex, but this is
disabled in our bundles.  If Mozilla would fix at least one bug in the
SOCKS layer, we wouldn't need to ship an http proxy with our bundles at
all.  The bug being, https://bugzilla.mozilla.org/show_bug.cgi?id=280661

Our goal is not to filter the Internet, but provide anonymity.  Tor
users are free to setup their own solutions if they want ad blocking,
clickjacking protection, etc.  Most people do this in the browser now
with plugins.  If you want to use privoxy, by all means, keep doing so.

-- 
Andrew Lewman
The Tor Project
pgp 0x31B0974B

Website: https://torproject.org/
Blog: https://blog.torproject.org/
Identica/Twitter: torproject