2e3ee93a25d2398effbc7ef06fa8e859046a4bb0
traumschule turn download warnings into...

traumschule authored 5 years ago

1) #! /usr/bin/wml
2) <: use strict; :>
3) <: use warnings; :>
4) 
5) #<!-- included by the download pages -->
6) 
7) <div class="warning">
8) <a name="warning"></a>
9) <a name="Warning"></a>
10) <h2><a class="anchor" href="#warning">Want Tor to really work?</a></h2>
11) 	<p>You need to change some of your habits, as some things won't work exactly as
12) you are used to.</p>
13) 
14) <ol>
15) <li><b>Use Tor Browser</b>
16) 
17) <p>
18) 
19) Tor does not protect all of your computer's Internet traffic when you
20) run it. Tor only protects your applications that are properly configured to
21) send their Internet traffic through Tor. To avoid problems with Tor
22) configuration, we strongly recommend you use the
23) <a href="<page projects/torbrowser>">Tor Browser</a>. It is pre-configured to protect
24) your privacy and anonymity on the web as long as you're browsing with Tor
25) Browser itself. Almost any other web browser configuration is likely to be
26) unsafe to use with Tor.
27) 
28) </p>
29) 
30) </li>
31) 
32) <li><b>Don't torrent over Tor</b>
33) <p>
34) Torrent file-sharing applications have been observed to ignore proxy 
35) settings and make direct connections even when they are told to use Tor. 
36) Even if your torrent application connects only through Tor, you will 
37) often send out your real IP address in the tracker GET request, 
38) because that's how torrents work. Not only do you <a 
39) href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">
40) deanonymize your torrent traffic and your other simultaneous Tor web 
41) traffic</a> this way, you also slow down the entire Tor network for everyone else. 
42) </p>
43) </li>
44) 
45) <li><b>Don't enable or install browser plugins</b>
46) 
47) <p>
48) 
49) Tor Browser will block browser plugins such as Flash, RealPlayer,
50) Quicktime, and others: they can be manipulated into revealing your IP address.
51) Similarly, we do not recommend installing additional addons or plugins into
52) Tor Browser, as these may bypass Tor or otherwise harm your anonymity and
53) privacy.
54) 
55) </p>
56) 
57) </li>
58) 
59) <li><b>Use HTTPS versions of websites</b>
60) 
61) <p>
62) 
63) Tor will encrypt your traffic
64) <a href="<page about/overview>#thesolution">to and
65) within the Tor network</a>, but the encryption of your traffic to the final
66) destination website depends upon on that website. To help ensure private
67) encryption to websites, Tor Browser includes <a
68) href="https://www.eff.org/https-everywhere">HTTPS Everywhere</a> to force the
69) use of HTTPS encryption with major websites that support it. However, you
70) should still watch the browser URL bar to ensure that websites you provide
71) sensitive information to display a
72) <a href="https://support.mozilla.com/en-US/kb/Site%20Identity%20Button">blue or
73) green URL bar button</a>, include <b>https://</b> in the URL, and display the
74) proper expected name for the website. Also see EFF's interactive page
75) explaining <a href="https://www.eff.org/pages/tor-and-https">how Tor
76) and HTTPS relate</a>.
77) 
78) </p>
79) 
80) </li>
81) 
82) <li><b>Don't open documents downloaded through Tor while online</b>
83) 
84) <p>
85) 
86) Tor Browser will warn you before automatically opening documents that are
87) handled by external applications. <b>DO NOT IGNORE THIS WARNING</b>.  You
88) should be very careful when downloading documents via Tor (especially DOC and
89) PDF files, unless you use the PDF viewer that's built into Tor Browser) as
90) these documents can contain Internet resources that will be downloaded outside
91) of Tor by the application that opens them. This will reveal your non-Tor IP
92) address. If you must work with DOC and/or PDF files, we strongly recommend
93) either using a disconnected computer,
94) downloading the free <a href="https://www.virtualbox.org/">VirtualBox</a> and
95) using it with a <a href="http://virtualboxes.org/">virtual machine image</a>
96) with networking disabled, or using <a href="https://tails.boum.org/">Tails</a>.
97) Under no circumstances is it safe to use
98) <a href="https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea">BitTorrent
99) and Tor</a> together, however.
100) 
101) </p>
102) 
103) </li>
104) 
105) <li><b>Use bridges and/or find company</b>
106) 
107) <p>
108) 
109) Tor tries to prevent attackers from learning what destination websites you
110) connect to. However, by default, it does not prevent somebody watching your Internet
111) traffic from learning that you're using Tor. If this matters to you, you can
traumschule warnings.wmi: recommend to...

traumschule authored 5 years ago

112) reduce this risk by configuring Tor to use a <a href="<page docs/bridges>#PluggableTransports">
113) Pluggable Transport</a> rather than connecting directly to the public Tor network.