Just a quick announcement of the new release of FreeWeb.
Firstly, in response to the Content of Evil webmaster, I have successfully
browsed FreeWeb inserted sites in FProxy. Also, I have verified the validity
of the inserted manifests. If you find your Freesites not coming up in
FProxy, increase FProxy's htl settings. If this doesn't work (it damn well
should), request your site's files with frequest/freenet_request and see for
yourself. If there's still a problem, please post something on your site.
The main point of FreeWeb 0.1.3.1 is that all proxy functionality has been
completely removed.
This was a difficult decision (since the FreeWeb proxy was fast and mean),
but necessary due to:
1) Chronic stability problems, which were proving elusive to debug, but more
importantly,
2) Security issues. Even though I had a watertight defense against http web
bugs, I realised that it's trivial to 'web bug' a freesite by planting an
<img> tag which hits to https, ftp, gopher etc. To cover for this, I would
need to write proxies for all these protocols. The only other anonymity
defense is for someone to set their browser to proxy everything through
FreeWeb, and turn off proxying whenever they want to use these other
protocols. People will find this annoying, and may lapse in their diligence.
Since the tiniest slip in anonymity filtering may potentially cost lives, I
have opted to remove all proxy stuff from FreeWeb, and steer people to
FProxy instead, enclosing instructions on how to beef up FProxy's htl
setting (!)
So from now on, FreeWeb is purely a site insertion tool.
It's possible at some time soon I might write a dedicated browser as a
separate program, and to address all security issues by divert all FreeWeb
hits through FProxy.
Cheers
David
_______________________________________________
Chat mailing list
[EMAIL PROTECTED]
http://lists.freenetproject.org/mailman/listinfo/chat
