On Sat, 27 Oct 2007 17:16:42 GMT, Joan Battaglia wrote:

> On Fri, 26 Oct 2007 21:07:50 -0500, VanguardLH wrote:
>
>> Don't trust your bank accounts, online buying, PayPal, login
>> passwords, or any other privacy data over Tor. What you send to the
>> target site is obviously available to a Tor operator, too.
>
> I'm not sure I understand the bottom line.
> Are you saying BOTH http and https are compromised when one uses a Tor?
>
> In other words, does Tor give us anonymity but not privacy?
> Or, can we use https for the privacy and http for the anonymity?
>
> Sorry I'm confused.

Depending on the ferocity level of an adversary, Tor can give you both
or neither.
--
"You can't trust code that you did not totally create yourself"
Ken Thompson "Reflections on Trusting Trust"
http://www.acm.org/classics/sep95/