December 20, 2000

11:33 PM

Has anyone tried and tested Safe Web? Seems a lot simpler and easier (not to mention cheaper) than Anonymizer. Though you have to enter each address, so it's not for people wanting anonymity all the time. . .
posted by aflakete (6 comments total)

Actually, you don't have to enter each address. Every link you click will be filtered through Safeweb. Also, you can make it your start page, so that every browser session is completely anonymous.

This is the only anonymous proxy I use. They thought of almost everything.
posted by waxpancake at 11:11 AM on December 21, 2000

It is interesting to get an analysis of your privacy through Safe Web by entering http://privacy.net/analyze/ in their system.
posted by quirked at 11:34 AM on December 21, 2000

I've been happy with Multiproxy
posted by Dr_Moreese at 12:41 PM on December 21, 2000

Satisfies all of my capital-crime-planning needs.
posted by dhartung at 1:15 PM on December 21, 2000

Multiproxy looks good, but it doesn't solve the same class of problems Safeweb does: if you're surfing from work (I am now :-) and you don't want your employers to know that you're looking at 'Career' sites (or whatever), resetting your proxy server to some off-site anonymizing one will NOT make your session unsniffable by your company's network as the traffic will still be going through their routers, unencrypted.

OTOH, Safeweb masks everything in HTTPS (SSL) requests which WILL encrypt the content of your surfing. The only thing I am not clear about is URLs: I am not sure if HTTPS still leaves URLs unencrypted (and if it does, that's a hole as Safeweb includes your destination's URL in its own).

However, tools have been published recently that will make large-scale subversion of SSL possible; your company's routers will actually be in an ideal position to use those tools to read HTTPS/SSL traffic in real time, so SafeWeb might be surmountable after all, but it's a question of how much a company cares to sniff all traffic --I would venture to guess that that would actually be legal, as it is legal to sniff unencrypted traffic on the company's network...

There are two kinds of people: the paranoid and those who are after them...
posted by costas at 3:22 PM on December 21, 2000

BTW: I checked; HTTPS *does* encrypt URLs...
posted by costas at 4:40 PM on December 21, 2000