<div>Cool beans. Thanks for the clarification. You do raise one question in my mind. I've been playing around with multiple OS's (i.e. Ubuntu 7.04, Windows XP and DSL) but I'm tied to Windows XP (I'm a contract developer and traditionally get paid for .Net work). Obviously there are issues with IE, FireFox isn't much better unless you know what you're doing and the others have some javascript issues. All of that said, what kind of setup do you use and how does it provide you extra anonymity/security versus others? On most sites, you just can't get by without some sort of use of cookies. Of course, this too limits your ability towards privacy so I'm trying to create a best practice scnario for myself on a site-by-site basis.</div>
<div> </div>
<div>Thanks,<br>Chris<br><br></div>
<div class="gmail_quote">On Fri, May 16, 2008 at 6:22 PM, F. Fox <<a href="mailto:kitsune.or@gmail.com">kitsune.or@gmail.com</a>> wrote:<br>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">-----BEGIN PGP SIGNED MESSAGE-----<br>Hash: SHA256<br><br>1.) No, using SSL over Tor doesn't "short circuit" its anonymization.<br>
The result is end-to-end security AND anonymity.<br><br>2.) While some folks complain that SSL screws up filtering proxies (like<br>Privoxy) and may cause extra info to be leaked, I believe that all of<br>that should be taken care of in the browser - and on my setup, indeed it is.<br>
<br>Therefore in such a scenario, SSL is the best thing to use if you can<br>get it, since it prevents the exit node from sniffing your traffic - the<br>one big privacy hole left in Tor.<br><br>(That's also a common misconception - Tor doesn't magically provide<br>
end-to-end encryption for the whole Net. Traffic can still be sniffed at<br>the exit and after the exit, unless SSL is being used.)<br><br>- --<br>F. Fox<br>AAS, CompTIA A+/Network+/Security+<br>Owner of Tor node "kitsune"<br>
<a href="http://fenrisfox.livejournal.com/" target="_blank">http://fenrisfox.livejournal.com</a><br>-----BEGIN PGP SIGNATURE-----<br>Version: GnuPG v1.4.6 (GNU/Linux)<br>Comment: Using GnuPG with Mozilla - <a href="http://enigmail.mozdev.org/" target="_blank">http://enigmail.mozdev.org</a><br>
<br>iQIVAwUBSC4JC+j8TXmm2ggwAQjjJg//er0LTukGFwS1H5EpvBqUTNPYvqtfApa2<br>4oZgi7HPn9nNHEMXV6nT0MTXnAjH1AQQdxlQwC7cpcYrtSxEwCjGn90pG8wNQB4P<br>wKt0tE6rCOuTKoacuJiJoc7WCfb76L0U06dP1MLH9KDwFE5UFVuB0I1/hPX66tqR<br>WQPG35BpaWFdua4pKTSwdkPBY9kdsrXA0KP4Z9UQQZVYsoiTem6ev184oqtaJaXi<br>
feKEtLuKp46zNlgMumikI/EZDTnfLStWXsP/fgnfKR3fx3bhfhnCHtMWvWWCp7+x<br>bvTT+xJHXii6vcnSR+U8duMY92q+jb/C1tAJqUxCcontEoHzN6i7Mo+zn9j5slb9<br>5/2OgrrJygBUsXjevPTd9frIdz18u8rQWSg2Vi0m09bstaDt3SsM/32xU+KFbIJx<br>myUAKmiBCA+Q0lMlCJAYV3Q6X8FNvs/RwogwhQolCtyzrxE3ZeMBTuJCAwXHc4py<br>
5ko2LSZwk/E5wHwf0u7XZoo0kRC1ghe3QhY6YHBMBCL7sa+PR6VUSE28Dq/+3Q2a<br>chR5RO23PKQ9FZZH5BoO8NmllQg2Vk+Z9pWbLfD3MpMy8L8yDnlt744qNOKL8NGi<br>pa9k8JVrHji2z6BpEDEOR9j2jr6XHhR0iIZM6dbb35DX6HjQ//cROugzB/XPzJaM<br>OCQ7bd80cwQ=<br>=9a3P<br>
-----END PGP SIGNATURE-----<br></blockquote></div><br><br clear="all"><br>-- <br>Interested in selling your home? Ask me!