Easy Firefox hacks to improve anonymity (HTTPS Header Scrubbing)

Audie Murphy murphy.audie at gmail.com
Wed May 24 18:35:14 UTC 2006


On 5/23/06 9:09 PM, "Anothony Georgeo" <anogeorgeo at yahoo.com> wrote:

> -----------
> 
> *CONCEPT*
> 
> There has been bit of dicussion latley about filtering
> HTTP/S environmental variable headers and creating a
> default HTTP/S header template for Tor users.
> 
> The last big hurdle (now solved) in header scrubbing
> is the scrubbing of HTTPS headers.
> 
> I think the solution is to use Firefox or FF
> extensions to filter the HTTPS headers as FF and FF
> extensions have access to the verifed and decrypted
> HTTPS headers on-the-fly by default.
> 
> I will describe how to edit the "about:config" menu
> and  how to configure the FF extensions "User Agent
> Switcher" and "RefControl".
> 
> The goal is to enable HTTPS header scrubbing while
> using the *same* anonymity set charastics as those
> which may be used by future relases of Tor bundled
> with Privoxy (using the default template).
> <http://archives.seul.org/or/talk/May-2006/msg00327.html>
> 
> For example, FF and FF extensions should make the
> HTTPS headers identical the HTTP headers created by
> Privoxy.  Thus inceasing the anonymity set and
> everyone's anonymity in general.
> 
> The anonymity set that I am attempting to use is as
> follows:
> 
-----SNIP-----

Hi.

What can one do about the User-Agent setting in Thunderbird or other email
clients?

Thanks!




More information about the tor-talk mailing list