-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 On 16/12/12 17:06, Jerzy Łogiewa wrote:
> Why not good idea? > > To be true, all free Wifi user should be suspicious. Why this would > be any different? The problem is, there seems to be a much higher ratio of bad:good Tor exit nodes than bad:good public wifi hotspots. I can't give you any evidence for that, but that's just the impression I've got since I've followed the project. I wouldn't let my mother do her online banking over Tor without explaining to her exactly how it works, and making sure she understands what she is doing. Even if a bad exit node didn't SSL strip her connection, she could still find her online banking access frozen due to accessing it from IPs in unexpected countries. If I were to offer a free Torified WiFi hotspot, I'd feel obliged to put up a splash page explaining how it works, and force people to check a box to state they understand, before they are given access to browse anything else. I normally hate those sorts of splash pages, but in this case, I would make an exception. I would also set up a transparent http web proxy using the HTTPS-Everywhere rulesets so that people without the HTTPS-Everywhere browser addon still get some of its protection. Using: https://github.com/mikecardwell/perl-HTTPSEverywhere - -- Mike Cardwell https://grepular.com/ http://cardwellit.com/ OpenPGP Key 35BC AF1D 3AA2 1F84 3DC3 B0CF 70A5 F512 0018 461F XMPP OTR Key 8924 B06A 7917 AAF3 DBB1 BF1B 295C 3C78 3EF1 46B4 -----BEGIN PGP SIGNATURE----- iQGGBAEBCgBwBQJQzjmJMBSAAAAAACAAB3ByZWZlcnJlZC1lbWFpbC1lbmNvZGlu Z0BwZ3AuY29tcGdwbWltZTgUgAAAAAAVABpwa2EtYWRkcmVzc0BnbnVwZy5vcmdt aWtlLmNhcmR3ZWxsQGdyZXB1bGFyLmNvbQAKCRCdJiMBwdHnBDcKB/40V+qYKF5a Y6/1U9agGB94rju2KgX8hU8Sdy/FpwUETheWdaxQjQOpqCWELNNv4EmWPtexBnCU AsCERLIsaEWyljEqixQpRFDHfXc6XqaVV7++CwMrEeqZz/xTKfzdiv7GhUrKSxCi kgUGezHjTPdmJK5PaegwdmG7btxFG5H5aRa4+O+Ap35sWlbaAXxQMSD+x5+Ip17q F2QUVZEBJR3pkW5DrE7PH9ASiLIYQEb5TFOiQCqdw7KsGuM5few8ou4C3jdOvezi xLE3m7+FIufyXkncwYmAn846tatTD5Mk1cUgiqAMA9fWsfi5D6lNN/s23oW8m3pi rq/24HyjZyBy =LFhX -----END PGP SIGNATURE----- _______________________________________________ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
