move the warnings around a bit more, plus more cleanup, plus stop implying so much that the extensions will make your java/flash safe, because they probably won't.
Roger Dingledine

Roger Dingledine commited on 2007-03-08 23:27:34
Zeige 1 geänderte Dateien mit 41 Einfügungen und 35 Löschungen.

... ...
@@ -16,15 +16,37 @@ under the <a href="<svnsandbox>LICENSE">3-clause BSD license</a>.
16 16
 href="<page donate>">making a donation to the Tor project</a>.
17 17
 </p>
18 18
 
19
+<p>The latest stable release is <b><version-stable></b>, and the
20
+latest development release is <b><version-alpha></b>.</p>
21
+
22
+<p><b>Subscribe</b> to the
23
+<a href="http://archives.seul.org/or/announce/">or-announce mailing list</a>
24
+to keep informed of security advisories and new stable releases (you will
25
+need to confirm via email):</p>
26
+
27
+<form action="http://freehaven.net/cgi-bin/majordomo.cgi">
28
+<input type="hidden" name="mlist" value="or-announce">
29
+<input type="hidden" name="subscribe" value="1">
30
+<input type="hidden" name="host" value="freehaven.net">
31
+<input name="email" size="15">
32
+<input type="submit" value="subscribe">
33
+</form>
34
+
35
+<p>There is also an <a
36
+href="http://rss.gmane.org/gmane.network.onion-routing.announce">RSS
37
+feed</a> of the or-announce list at <a
38
+href="http://gmane.org">gmane.org</a>.</p>
39
+
19 40
 <a id="Warning"></a>
20
-<h4><a class="anchor" href="#Warning">Warning:  Want Tor to really work?</a></h4>
41
+<h4><a class="anchor" href="#Warning">Warning: Want Tor to really
42
+work?</a></h4>
21 43
 
22 44
 # Translators: you might not want to translate this section quite
23 45
 # yet, since it's likely to change a lot before we like it. -RD
24 46
 
25
-<p>...then please don't just install it and go on.  You need to change some of your habits, and reconfigure your software!</p>
26
-
27
-<p>Tor by itself is <b>NOT</b> all you need to maintain your anonymity.
47
+<p>...then please don't just install it and go on.  You need to change
48
+some of your habits, and reconfigure your software!
49
+Tor by itself is <b>NOT</b> all you need to maintain your anonymity.
28 50
 There are several major pitfalls to watch out for.
29 51
 </p>
30 52
 
... ...
@@ -39,11 +61,15 @@ supported applications</a>. -->
39 61
 
40 62
 <p>Second, browser plugins such as Java, Flash, ActiveX, RealPlayer,
41 63
 Quicktime, Adobe's PDF plugin, and others can be manipulated
42
-into revealing your IP address. We recommend the <a
43
-href="https://addons.mozilla.org/firefox/1237/">QuickJava</a> and <a
44
-href="https://addons.mozilla.org/firefox/433/">FlashBlock</a> extensions,
45
-and you should probably uninstall other <a href="about:plugins">plugins</a>
46
-in general.  YOu may want to have a browser configured with plug-ins, and another browser stripped down for use with Tor, to be able to use plug-ins when anonymity is not important, and use no plug-ins when you use Tor.  You may even want to use a text browser, such as <a href="http://lynx.browser.org/">lynx</a> when you are using Tor.
64
+into revealing your IP address. You should probably uninstall your plugins
65
+(go to "about:plugins" to see what is installed), or investigate <a
66
+href="https://addons.mozilla.org/firefox/1237/">QuickJava</a>, <a
67
+href="https://addons.mozilla.org/firefox/433/">FlashBlock</a>, and
68
+<a href="https://addons.mozilla.org/firefox/722/">NoScript</a>
69
+if you really need them. Some people prefer using two browsers (one for
70
+Tor, one for unsafe browsing).
71
+<!-- You may even want to use a text browser, such as <a
72
+href="http://lynx.browser.org/">lynx</a> when you are using Tor. -->
47 73
 <!-- You may also find
48 74
 <a href="https://addons.mozilla.org/firefox/722/">NoScript</a> and <a
49 75
 href="https://addons.mozilla.org/firefox/1865/">AdBlock</a> helpful. -->
... ...
@@ -63,42 +89,22 @@ can't encrypt your traffic between the Tor network and its final
63 89
 destination.</a>
64 90
 If you are communicating sensitive information, you should use as much
65 91
 care as you would on the normal scary Internet &mdash; use SSL or other
66
-end-to-end encryption and authentication. Also, while Tor blocks attackers
92
+end-to-end encryption and authentication.
93
+</p>
94
+
95
+<p>Fifth, while Tor blocks attackers
67 96
 on your local network from discovering or influencing your destination,
68 97
 it opens new risks: malicious or misconfigured Tor exit nodes can send
69 98
 you the wrong page, or even send you embedded Java applets disguised as
70 99
 domains you trust.
71 100
 </p>
72 101
 
73
-<p>Last, be smart and learn more. Understand what Tor offers and what
74
-it doesn't offer. This list of pitfalls isn't complete, and we need your
102
+<p>Be smart and learn more. Understand what Tor does and does not offer.
103
+This list of pitfalls isn't complete, and we need your
75 104
 help <a href="<page volunteer>#Documentation">identifying and documenting
76 105
 all the issues</a>.
77 106
 </p>
78 107
 
79
-
80
-
81
-<p>The latest stable release is <b><version-stable></b>, and the
82
-latest development release is <b><version-alpha></b>.</p>
83
-
84
-<p><b>Subscribe</b> to the
85
-<a href="http://archives.seul.org/or/announce/">or-announce mailing list</a>
86
-to keep informed of security advisories and new stable releases (you will
87
-need to confirm via email):</p>
88
-
89
-<form action="http://freehaven.net/cgi-bin/majordomo.cgi">
90
-<input type="hidden" name="mlist" value="or-announce">
91
-<input type="hidden" name="subscribe" value="1">
92
-<input type="hidden" name="host" value="freehaven.net">
93
-<input name="email" size="15">
94
-<input type="submit" value="subscribe">
95
-</form>
96
-
97
-<p>There is also an <a
98
-href="http://rss.gmane.org/gmane.network.onion-routing.announce">RSS
99
-feed</a> of the or-announce list at <a
100
-href="http://gmane.org">gmane.org</a>.</p>
101
-
102 108
 <table border="1" cellspacing="0" cellpadding="2">
103 109
 <thead>
104 110
 <tr>
105 111