Author: phobos Date: 2012-01-07 18:44:56 +0000 (Sat, 07 Jan 2012) New Revision: 25294 Modified: website/trunk/download/en/download-easy.wml Log: clean up the download-easy warning a bit. Modified: website/trunk/download/en/download-easy.wml =================================================================== --- website/trunk/download/en/download-easy.wml 2012-01-07 18:40:24 UTC (rev 25293) +++ website/trunk/download/en/download-easy.wml 2012-01-07 18:44:56 UTC (rev 25294) @@ -144,115 +144,86 @@ <a name="warning"></a> <a name="Warning"></a> <h2><a class="anchor" href="#warning">Want Tor to really work?</a></h2> - <p>You need to change some of your habits, as some things won't work exactly as -you are used to. </p> +<p>You need to change some of your habits, as some things won't work +exactly as you are used to.</p> <ol> <li><b>Use the Tor Browser</b> - -<p> - -Tor does not protect all of your computer's Internet traffic when you -run it. Tor only protects your applications that are properly configured to -send their Internet traffic through Tor. To avoid problems with Tor -configuration, we strongly recommend you use the -<a href="<page projects/torbrowser>">Tor Browser Bundle</a>. It is pre-configured to protect -your privacy and anonymity on the web as long as you're browsing with the Tor -Browser itself. Almost any other web browser configuration is likely to be -unsafe to use with Tor. - -</p> - +<p>Tor does not protect all of your computer's Internet traffic when you +run it. Tor only protects your applications that are properly configured +to send their Internet traffic through Tor. To avoid problems with +Tor configuration, we strongly recommend you use the <a href="<page +projects/torbrowser>">Tor Browser Bundle</a>. It is pre-configured to +protect your privacy and anonymity on the web as long as you're browsing +with the Tor Browser itself. Almost any other web browser configuration +is likely to be unsafe to use with Tor.</p> </li> <li><b>Don't enable or install browser plugins</b> - -<p> - -The Tor Browser will block browser plugins such as Flash, RealPlayer, -Quicktime, and others: they can be manipulated into revealing your IP address. -Similarly, we do not recommend installing additional addons or plugins into -the Tor Browser, as these may bypass Tor or otherwise harm your anonymity and -privacy. The lack of plugins means that Youtube videos are blocked by default, -but Youtube does provide an experimental opt-in feature -<a href="https://www.youtube.com/html5">(enable it here)</a> that works for some -videos. - -</p> - +<p>The Tor Browser will block browser plugins such as Flash, RealPlayer, +Quicktime, and others: they can be manipulated into revealing your IP +address. Similarly, we do not recommend installing additional addons or +plugins into the Tor Browser, as these may bypass Tor or otherwise harm +your anonymity and privacy. The lack of plugins means that Youtube videos +are blocked by default, but Youtube does provide an experimental opt-in +feature <a href="https://www.youtube.com/html5">(enable it here)</a> +that works for some videos.</p> </li> <li><b>Use HTTPS versions of websites</b> - -<p> - -Tor will encrypt your traffic -<a href="https://www.torproject.org/about/overview.html.en#thesolution">to and -within the Tor network</a>, but the encryption of your traffic to the final -destination website depends upon on that website. To help ensure private -encryption to websites, the Tor Browser Bundle includes <a -href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> to force the -use of HTTPS encryption with major websites that support it. However, you -should still watch the browser URL bar to ensure that websites you provide -sensitive information to display a -<a href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue or -green URL bar button</a>, include <b>https://</b> in the URL, and display the -proper expected name for the website. - -</p> - +<p>Tor will encrypt your traffic <a +href="https://www.torproject.org/about/overview.html.en#thesolution">to +and within the Tor network</a>, but the encryption of your traffic to +the final destination website depends upon on that website. To help +ensure private encryption to websites, the Tor Browser Bundle includes +<a href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> +to force the use of HTTPS encryption with major websites that +support it. However, you should still watch the browser URL bar to +ensure that websites you provide sensitive information to display a <a +href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue +or green URL bar button</a>, include <b>https://</b> in the URL, and +display the +proper expected name for the website.</p> </li> <li><b>Don't open documents downloaded through Tor while online</b> - -<p> - -The Tor Browser will warn you before automatically opening documents that are -handled by external applications. <b>DO NOT IGNORE THIS WARNING</b>. You -should be very careful when downloading documents via Tor (especially DOC and -PDF files) as these documents can contain Internet resources that will be -downloaded outside of Tor by the application that opens them. This will reveal -your non-Tor IP address. If you must work with DOC and/or PDF files, we -strongly recommend either using a disconnected computer, -downloading the free <a href="https://www.virtualbox.org/">VirtualBox</a> and -using it with a <a href="http://virtualboxes.org/">virtual machine image</a> -with networking disabled, or using <a href="http://tails.boum.org/">Tails</a>. -Under no circumstances is it safe to use -<a href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent -and Tor</a> together, however. - -</p> - +<p>The Tor Browser will warn you before automatically opening +documents that are handled by external applications. <b>DO NOT +IGNORE THIS WARNING</b>. You should be very careful when downloading +documents via Tor (especially DOC and PDF files) as these documents +can contain Internet resources that will be downloaded outside of +Tor by the application that opens them. This will reveal your non-Tor +IP address. If you must work with DOC and/or PDF files, we strongly +recommend either using a disconnected computer, downloading the free <a +href="https://www.virtualbox.org/">VirtualBox</a> and using it with a <a +href="http://virtualboxes.org/">virtual machine image</a> with networking +disabled, or using <a href="http://tails.boum.org/">Tails</a>. +Under no circumstances is it safe to use <a +href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent +and Tor</a> together, however.</p> </li> <li><b>Use bridges and/or find company</b> - -<p> - -Tor tries to prevent attackers from learning what destination websites you -connect to. However, by default, it does not prevent somebody watching your Internet -traffic from learning that you're using Tor. If this matters to you, you can -reduce this risk by configuring Tor to use a <a href="<page docs/bridges>">Tor -bridge relay</a> rather than connecting directly to the public Tor network. -Ultimately the best protection is a social approach: the more Tor -users there are near you and the more -<a href="<page about/torusers>">diverse</a> their interests, the less -dangerous it will be that you are one of them. Convince other people to use -Tor, too! - -</p> - +<p>Tor tries to prevent attackers from learning what destination websites +you connect to. However, by default, it does not prevent somebody +watching your Internet traffic from learning that you're using Tor. If +this matters to you, you can reduce this risk by configuring Tor to use a +<a href="<page docs/bridges>">Tor bridge relay</a> rather than connecting +directly to the public Tor network. Ultimately the best protection is +a social approach: the more Tor users there are near you and the more +<a href="<page about/torusers>">diverse</a> their interests, the less +dangerous it will be that you are one of them. Convince other people to +use Tor, too!</p> </li> </ol> <br> -<p> -Be smart and learn more. Understand what Tor does and does not offer. -This list of pitfalls isn't complete, and we need your -help <a href="<page getinvolved/volunteer>#Documentation">identifying and documenting -all the issues</a>. -</p> +<p>Be smart and learn more. Understand what Tor does and does not offer. +This list of pitfalls isn't complete, and we need your help <a href="<page +getinvolved/volunteer>#Documentation">identifying and documenting all +the issues</a>.</p> + </div> <!-- END WARNING --> </div>