t...@lists.grepular.com: > On 04/08/12 17:59, Noel Pluny wrote: > >>> It's just an idea... Could Tor be a solution? The wifi interfaces >>> routes all traffic over Tor. Before people can start using the >>> wifi they have to notice a small website explaining Tor, exit >>> sniffing, recommendation to avoid unencrypted traffic, logging >>> into bank accounts (to prevent getting them frozen) and so on. > >> In my idea this is not compulsory but could be an add on. > > I think this part is essential. Ask yourself this: Would you install > Tor on a friend or families laptop without explaining to them exactly > what it is and how to use it safely? I know I wouldn't.
No. > The trouble is, most people will probably ignore the warnings, and > some of them will end up having their SSL sessions stripped and their > accounts hacked. Some will end up having access to their accounts > blocked for logging in from multiple countries in a short period of > time, and when they get phoned up by their banks to ask them why this > happened, they'll have no idea. > > I wouldn't feel happy routing somebody elses Internet traffic over Tor > without *making sure* they understood the risks. For the general > public, I don't think anything short of a face to face discussion can > do that. Certainly not a landing page. We can make a complex landing page. That landing page would explain what Tor is and test the knowledge with a multiple choice test. Only if they succeed they may continue. What may happen if I login using the Tor powered wifi hotspot? [ ] Win lottery. [*] Account may get frozen or canceled. [ ] Get a free burger. [ ] My device will run better and faster. Show a SSL warning... What to do? [ ] Click accept anyway. [ ] Call police. [*] Expect transmission being read by third party. [ ] Add exception. Can exit nodes read your traffic? [*] Yes, unless it's encrypted. [ ] No. [ ] Only police can. [ ] They don't care. Just quick example. Etc... That test could be re-used elsewhere. Regular Tor users could voluntary do the test, of course with no repercussions if they don't or don't want to. Just as a gimmick for torproject.org. _______________________________________________ tor-talk mailing list tor-talk@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk
