[tor-commits] r25425: {website} Answer some FAQs about JavaScript in TBB (website/trunk/docs/en)

[Robert Ransom <rransom.8774@xxxxxxxxx>]

Author: rransom
Date: 2012-02-14 09:59:53 +0000 (Tue, 14 Feb 2012)
New Revision: 25425

Modified:
   website/trunk/docs/en/faq.wml
Log:
Answer some FAQs about JavaScript in TBB


Modified: website/trunk/docs/en/faq.wml
===================================================================
--- website/trunk/docs/en/faq.wml	2012-02-14 09:47:38 UTC (rev 25424)
+++ website/trunk/docs/en/faq.wml	2012-02-14 09:59:53 UTC (rev 25425)
@@ -61,6 +61,8 @@
     go?</a></li>
     <li><a href="#TBBOtherExtensions">Can I install other Firefox
     extensions?</a></li>
+    <li><a href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle?  Isn't that unsafe?</a></li>
+    <li><a href="#TBBCanIBlockJS">I'm an expert!  (No, really!)  Can I configure NoScript to block JavaScript by default?</a></li>
     <li><a href="#TBBOtherBrowser">I want to use Chrome/IE/Opera/etc
     with Tor.</a></li>
     <li><a href="#TBBCloseBrowser">I want to leave Tor Browser Bundle
@@ -850,6 +852,41 @@
 
 <hr>
 
+<a id="TBBJavaScriptEnabled"></a>
+<h3><a class="anchor" href="#TBBJavaScriptEnabled">Why is NoScript configured to allow JavaScript by default in the Tor Browser Bundle?  Isn't that unsafe?</a></h3>
+
+<p>
+We configure NoScript to allow JavaScript by default in the Tor
+Browser Bundle because many websites will not work with JavaScript
+disabled.  Most users would give up on Tor entirely if a website
+they want to use requires JavaScript, because they would not know
+how to allow a website to use JavaScript (or that enabling
+JavaScript might make a website work).
+</p>
+
+<hr>
+
+<a id="TBBCanIBlockJS"></a>
+<h3><a class="anchor" href="#CanIBlockJS">I'm an expert!  (No, really!)  Can I configure NoScript to block JavaScript by default?</a></h3>
+
+<p>
+You can configure your copies of Tor Browser Bundle however you want
+to.  However, we recommend that even users who know how to use
+NoScript leave JavaScript enabled if possible, because a website or
+exit node can easily distinguish users who disable JavaScript from
+users who use Tor Browser bundle with its default settings (thus
+users who disable JavaScript are less anonymous).
+</p>
+
+<p>
+Disabling JavaScript by default, then allowing a few websites to run
+scripts, is especially bad for your anonymity: the set of websites
+which you allow to run scripts is very likely to <em>uniquely</em>
+identify your browser.
+</p>
+
+<hr>
+
 <a id="TBBOtherBrowser"></a>
 <h3><a class="anchor" href="#TBBOtherBrowser">I want to use
 Chrome/IE/Opera/etc with Tor.</a></h3>

_______________________________________________
tor-commits mailing list
tor-commits@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-commits