<div dir="ltr">Enabling javascript and cookies for everything is dangerous to anonymity, but doing that selectively is much less so. Cookies are recommended against because they, by definition, store something along with the user - meaning that even if the tor IP changes, the cookie can be used to connect it to the old one. This isn't an issue for a webmail system anyway, where you have a username that does a perfectly good job of connecting you to your old traffic already (and if you were trying to avoid that, you'd be using a new account, and thus a different cookie). Google, for example, uses cookies to help track users through IP changes, which can easily become dangerous if you use both Tor and non-Tor google in the same browser.<br>
<br>Javascript's only real danger to anonymity is exploits (i.e. if some javascript traffic went outside the proxy, or if it helped compromise the browser), but it is worth noting that javascript can also change the content of the page you're viewing. If you have a bad exit node that inserts fake javascript into pages (it's happened), you won't have a real way to know the difference.<br>
<br>In theory, javascript could also be of use in certain timing or latency attacks to discover a client's circuit (by generating large amounts of constant traffic), but that's not hard to do without javascript.<br>
<br>You should be fine enabling javascript and cookies for specific sites that require it - although you should try to use SSL there if at all possible.<br><br clear="all">- John Brooks<br><br><div class="gmail_quote">On Sat, Aug 16, 2008 at 9:56 AM, Charles.F <span dir="ltr"><<a href="mailto:Charles.f@swing.be">Charles.f@swing.be</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div style=""><div style=""><div style=""><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">Hi,</span></font><div>
<font face="Verdana" size="3"><span style="font-size: 13px;"><br></span></font></div><div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">I am not shure I understand very well how mailing lists like this works, so correct me if I don't do it the way it should be.</span></font></div>
<div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">I'm just gonna ask my question here, right ? :</span></font></div><div><font face="Verdana" size="3"><span style="font-size: 13px;"><br>
</span></font></div><div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">If one wants to be anonymous when sending an receiving mails, one should use privoxy and tor on his browser and also disable Java, Javascript</span></font><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">, cookies and so on. </span></font></div>
<div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">Any webmail I tried to subscibe to couldn't work without either Javascript</span></font><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;"> or Cookies enabled so I suppose webmails needs Javascript and/or Cookies enabled to work properly, am I right ? </span></font></div>
<div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">In that case, one can't be sure of its anonymity (as cookies or javascript are enabled) when one send or receive mails... </span></font></div>
<div><font face="Verdana" size="3"><span style="font-size: 13px;"><br></span></font></div><div><font color="#000000" face="Verdana" size="3"><span style="background-color: transparent; font-size: 13px;">I hope my question is clear and sorry if the answer is obvious or if I didn't send it to the right e-mail address</span></font></div>
<div><font face="Verdana" size="3"><span style="font-size: 13px;"><br></span></font></div><div><font face="Verdana" size="3"><span style="font-size: 13px;">Thanks</span></font></div></div></div></div></blockquote></div><br>
</div>