December 20, 2000
11:33 PM Subscribe
Has anyone tried and tested Safe Web? Seems a lot simpler and easier (not to mention cheaper) than Anonymizer. Though you have to enter each address, so it's not for people wanting anonymity all the time. . .
It is interesting to get an analysis of your privacy through Safe Web by entering http://privacy.net/analyze/ in their system.
posted by quirked at 11:34 AM on December 21, 2000
posted by quirked at 11:34 AM on December 21, 2000
Multiproxy looks good, but it doesn't solve the same class of problems Safeweb does: if you're surfing from work (I am now :-) and you don't want your employers to know that you're looking at 'Career' sites (or whatever), resetting your proxy server to some off-site anonymizing one will NOT make your session unsniffable by your company's network as the traffic will still be going through their routers, unencrypted.
OTOH, Safeweb masks everything in HTTPS (SSL) requests which WILL encrypt the content of your surfing. The only thing I am not clear about is URLs: I am not sure if HTTPS still leaves URLs unencrypted (and if it does, that's a hole as Safeweb includes your destination's URL in its own).
However, tools have been published recently that will make large-scale subversion of SSL possible; your company's routers will actually be in an ideal position to use those tools to read HTTPS/SSL traffic in real time, so SafeWeb might be surmountable after all, but it's a question of how much a company cares to sniff all traffic --I would venture to guess that that would actually be legal, as it is legal to sniff unencrypted traffic on the company's network...
There are two kinds of people: the paranoid and those who are after them...
posted by costas at 3:22 PM on December 21, 2000
OTOH, Safeweb masks everything in HTTPS (SSL) requests which WILL encrypt the content of your surfing. The only thing I am not clear about is URLs: I am not sure if HTTPS still leaves URLs unencrypted (and if it does, that's a hole as Safeweb includes your destination's URL in its own).
However, tools have been published recently that will make large-scale subversion of SSL possible; your company's routers will actually be in an ideal position to use those tools to read HTTPS/SSL traffic in real time, so SafeWeb might be surmountable after all, but it's a question of how much a company cares to sniff all traffic --I would venture to guess that that would actually be legal, as it is legal to sniff unencrypted traffic on the company's network...
There are two kinds of people: the paranoid and those who are after them...
posted by costas at 3:22 PM on December 21, 2000
« Older The stars in the core of our galaxy are moving... | Mayan Suburbia Newer »
This thread has been archived and is closed to new comments
This is the only anonymous proxy I use. They thought of almost everything.
posted by waxpancake at 11:11 AM on December 21, 2000