Author: rransom Date: 2012-02-14 09:59:53 +0000 (Tue, 14 Feb 2012) New Revision: 25425

Modified: website/trunk/docs/en/faq.wml Log: Answer some FAQs about JavaScript in TBB

Modified: website/trunk/docs/en/faq.wml =================================================================== --- website/trunk/docs/en/faq.wml 2012-02-14 09:47:38 UTC (rev 25424) +++ website/trunk/docs/en/faq.wml 2012-02-14 09:59:53 UTC (rev 25425) @@ -61,6 +61,8 @@ go?</a></li> <li><a href="#TBBOtherExtensions">Can I install other Firefox extensions?</a></li> + <li><a href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle? Isn't that unsafe?</a></li> + <li><a href="#TBBCanIBlockJS">I'm an expert! (No, really!) Can I configure NoScript to block JavaScript by default?</a></li> <li><a href="#TBBOtherBrowser">I want to use Chrome/IE/Opera/etc with Tor.</a></li> <li><a href="#TBBCloseBrowser">I want to leave Tor Browser Bundle @@ -850,6 +852,41 @@

<hr>

+<a id="TBBJavaScriptEnabled"></a> +<h3><a class="anchor" href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle? Isn't that unsafe?</a></h3> + +<p> +We configure NoScript to allow JavaScript by default in the Tor +Browser Bundle because many websites will not work with JavaScript +disabled. Most users would give up on Tor entirely if a website +they want to use requires JavaScript, because they would not know +how to allow a website to use JavaScript (or that enabling +JavaScript might make a website work). +</p> + +<hr> + +<a id="TBBCanIBlockJS"></a> +<h3><a class="anchor" href="#CanIBlockJS">I'm an expert! (No, really!) Can I configure NoScript to block JavaScript by default?</a></h3> + +<p> +You can configure your copies of Tor Browser Bundle however you want +to. However, we recommend that even users who know how to use +NoScript leave JavaScript enabled if possible, because a website or +exit node can easily distinguish users who disable JavaScript from +users who use Tor Browser bundle with its default settings (thus +users who disable JavaScript are less anonymous). +</p> + +<p> +Disabling JavaScript by default, then allowing a few websites to run +scripts, is especially bad for your anonymity: the set of websites +which you allow to run scripts is very likely to <em>uniquely</em> +identify your browser. +</p> + +<hr> + <a id="TBBOtherBrowser"></a> <h3><a class="anchor" href="#TBBOtherBrowser">I want to use Chrome/IE/Opera/etc with Tor.</a></h3>