[tor-talk] Make Wifi available through Tor?

[tor at lists.grepular.com]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

On 16/12/12 17:06, Jerzy Łogiewa wrote:

> Why not good idea?
> 
> To be true, all free Wifi user should be suspicious. Why this would
> be any different?

The problem is, there seems to be a much higher ratio of bad:good Tor
exit nodes than bad:good public wifi hotspots. I can't give you any
evidence for that, but that's just the impression I've got since I've
followed the project.

I wouldn't let my mother do her online banking over Tor without
explaining to her exactly how it works, and making sure she
understands what she is doing. Even if a bad exit node didn't SSL
strip her connection, she could still find her online banking access
frozen due to accessing it from IPs in unexpected countries.

If I were to offer a free Torified WiFi hotspot, I'd feel obliged to
put up a splash page explaining how it works, and force people to
check a box to state they understand, before they are given access to
browse anything else. I normally hate those sorts of splash pages, but
in this case, I would make an exception.

I would also set up a transparent http web proxy using the
HTTPS-Everywhere rulesets so that people without the HTTPS-Everywhere
browser addon still get some of its protection. Using:
https://github.com/mikecardwell/perl-HTTPSEverywhere

- -- 
Mike Cardwell  https://grepular.com/     http://cardwellit.com/
OpenPGP Key    35BC AF1D 3AA2 1F84 3DC3  B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1  BF1B 295C 3C78 3EF1 46B4
-----BEGIN PGP SIGNATURE-----

iQGGBAEBCgBwBQJQzjmJMBSAAAAAACAAB3ByZWZlcnJlZC1lbWFpbC1lbmNvZGlu
Z0BwZ3AuY29tcGdwbWltZTgUgAAAAAAVABpwa2EtYWRkcmVzc0BnbnVwZy5vcmdt
aWtlLmNhcmR3ZWxsQGdyZXB1bGFyLmNvbQAKCRCdJiMBwdHnBDcKB/40V+qYKF5a
Y6/1U9agGB94rju2KgX8hU8Sdy/FpwUETheWdaxQjQOpqCWELNNv4EmWPtexBnCU
AsCERLIsaEWyljEqixQpRFDHfXc6XqaVV7++CwMrEeqZz/xTKfzdiv7GhUrKSxCi
kgUGezHjTPdmJK5PaegwdmG7btxFG5H5aRa4+O+Ap35sWlbaAXxQMSD+x5+Ip17q
F2QUVZEBJR3pkW5DrE7PH9ASiLIYQEb5TFOiQCqdw7KsGuM5few8ou4C3jdOvezi
xLE3m7+FIufyXkncwYmAn846tatTD5Mk1cUgiqAMA9fWsfi5D6lNN/s23oW8m3pi
rq/24HyjZyBy
=LFhX
-----END PGP SIGNATURE-----