-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Thursday 22 September 2005 12:40 pm, Saqib Ali wrote:
If this is for several users in an enterprise, try:
Publish IE/Firefox on Citrix, and use Anoymous Citrix users accounts.
Clean Anonymous user space after logoff. Best way to anonymize
internet access. Tunnel ICA (Citrix protocol) through SSL.
I know nothing about Citrix. They appear to be a service that offers VPN to
their machines, then proxy connections to the outside. That would dictate the
connection between you and them is already encrypted, and "tunneling it
through SSL" would seem pointless.
OTOH, tunneling an SSL connection to an end location or a forwarding server
through the VPN connection to Citrix might be very useful. It would obscure
content from Citrix, as well as anyone between Citrix and that SSL
connection's end point.
All that said, The OP stated a preference that the service keep no logs. Does
Citrix log? How do you know?
The simple answer is that you do not. You can't, unless you're Citrix. They
can claim anything they want. It's meaningless in essence. This is true for
any such single point of contact. None of them can be assumed to be anonymous
in any way, and none of them are the "best way" to anonymize connections to
the internet.
The closest thing you're going to get to real anonymity on the internet is the
mixmaster remailer network, tor, and other similar mix/onion routed setups.
They're the only things designed to afford any true privacy at all, even in
the case of a partial compromise of the network. IOW, because of the "blind"
nature of such protocols, individual nodes in a given chain have no way to
log any useful information. The issue of "do they" becomes moot.
- --
Hand crafted on September 23, 2005 at 17:14:04 -0400
Outside of a dog, a book is a man's best friend.
Inside of a dog, it's too dark to read.
-Groucho Marx
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)
iD8DBQFDNHM6RHqalLqKnCkRAg6OAJwMptiF0H2KGlWknuErDniWn+3x6gCcD2to
jqotW6FF6Vu5dIXFGwhSyAw=
=mD+k
-----END PGP SIGNATURE-----
