X-Git-Url: http://www.privoxy.org/gitweb/?a=blobdiff_plain;f=debian%2FREADME.Debian;h=7074d3ba0ef15c1c54f2b690515a87da95ef2c4a;hb=83a163f3681a29b9c6fa205f9cae4aad71a74223;hp=5506000c45fb35dd4a89ed72c65319fbad4fad2a;hpb=47e9a13bb048883664b6e03d5ce325f36b68783c;p=privoxy.git

diff --git a/debian/README.Debian b/debian/README.Debian
index 5506000c..7074d3ba 100644
--- a/debian/README.Debian
+++ b/debian/README.Debian
@@ -1,11 +1,19 @@
 privoxy for Debian
 ==================
 
-- enable-edit-actions and enable-remote-toggle are disabled in the
-  Debian package for security reasons, because these options allow
-  every user of your privoxy to change its configuration. If you still
-  want to use these features, you can enable them in
-  /etc/privoxy/config and do a "/etc/init.d/privoxy restart".
+- enable-edit-actions, enable-remote-toggle, and
+  enable-remote-http-toggle are disabled in the Debian package for
+  security reasons, because these options allow every user of your
+  privoxy to change its configuration.  Except this there exist
+  exploits using Java and/or JavaScript that tell your browser to send
+  out requests for disabling the proxy or the filtering, which may
+  compromise your anonymity.  If you still want to use these features,
+  you can enable them in /etc/privoxy/config and do a
+  "/etc/init.d/privoxy restart".
+
+- Comment "debug 1" from default configuration, so GET/POST/CONNECT
+  requests are no longer logged by default to protect your privacy a
+  bit more.
 
 - Experimental IPv6 support patch is available in the source package
   but currently disabled because of too many side effects and bugs.
@@ -43,4 +51,4 @@ privoxy for Debian
   editable again.
 
 Roland Rosenfeld <roland@debian.org>
-$Id: README.Debian,v 1.6 2006-11-12 11:34:59 roland Exp $
+$Id: README.Debian,v 1.7 2007-10-21 10:07:04 roland Exp $