Commit 68c608ab authored by Runa A. Sandvik's avatar Runa A. Sandvik
Browse files

One step closer, still needs some nitpicking

parent fd764be7
Loading
Loading
Loading
Loading
+87 −35
Original line number Diff line number Diff line
# The Short User Manual

This document will eventually contain useful information on how to
download Tor, how to use Tor, why you would need a bridge, how to find
one, why flash doesn't work by default etc. This manual will be
translated into various languages (but we're aiming for Arabic, Farsi
and Chinese to begin with) and will be available on torproject.org and
via GetTor. See [#4069][] for more information.
This user manual contains information about how to downlod Tor, how to
use it, what to do when Tor is unable to connect to the network, and so
on. If you can't find the answer to your question in this document,
email <community-support@lists.torproject.org>.

  [#4069]: https://trac.torproject.org/projects/tor/ticket/4069
Last updated: October 6, 2011
Available in: English

How Tor Works
-------------

Tor is a network of virtual tunnels that allows you to improve your
privacy and security on the Internet. Tor works by sending your traffic
through three random servers in the network, before the traffic is sent
back out onto the public Internet.

![How Tor Works](/home/runa/tor/tor-manual/images/how-tor-works.png)

The image above illustrates a user browsing to the Twitter website over
Tor. The green monitors represent servers in the Tor network, while the
three locks represent the layers of encryption between each server that
the user is sending the traffic through.

Tor will anonymize the origin of your traffic, and it will encrypt
everything between you and the Tor network. Tor will also encrypt your
traffic inside the Tor network, but it can not encrypt your traffic
between the Tor network and its final destination. 

If you are communicating sensitive information, for example when logging
on to a website with a username and password, make sure that you are
using HTTPS (e.g. https://twitter.com, not http://twitter.com).

How to Download Tor
-------------------
@@ -27,18 +46,63 @@ and start Tor.

### Using GetTor
To receive the Tor Browser Bundle for Windows via email, send an email
to <gettor@torproject.org> with "tor-browser-bundle" in the body of the
message. You can leave the subject blank.
to <gettor@torproject.org> with *tor-browser-bundle* in the body of
the message. You can leave the subject blank.

If you are using another operating system, or want a package other than
the Tor Browser Bundle, write "help" instead. You will then receive an
the Tor Browser Bundle, write *help* instead. You will then receive an
email with instructions and a list of packages that we can send you.

How to Verify that You Have the Right Version
---------------------------------------------
The software you receive is accompanied by a file with the same name as
the package and the extension ".asc". This .asc file is a GPG signature,
and will allow you to verify the file you've downloaded is exactly the 
one that we intended you to get.

Before you can verify the signature, you will have to download and
install GnuPG:   

**Windows**: [http://gpg4win.org/download.html](http://gpg4win.org/download.html)    
**Mac OS X**: [http://macgpg.sourceforge.net/](http://macgpg.sourceforge.net/)    
**Linux**: Most Linux distributions come with GnuPG preinstalled.

Please note that you may need to edit the paths and the commands used
below to get it to work on your system.

Erinn Clark signs the Tor Browser Bundles with key 0x63FEE659. To import
Erinn's key, run:

	gpg --keyserver hkp://keys.gnupg.net  --recv-keys 0x63FEE659

After importing the key, verify that the fingerprint is correct:

	gpg  --fingerprint 0x63FEE659

You should see:

	pub   2048R/63FEE659 2003-10-16
	      Key fingerprint = 8738 A680 B84B 3031 A630  F2DB 416F 0610 63FE E659
	uid                  Erinn Clark <erinn@torproject.org>
	uid                  Erinn Clark <erinn@debian.org>
	uid                  Erinn Clark <erinn@double-helix.org>
	sub   2048R/EB399FD7 2003-10-16

To verify the signature of the package you downloaded, run the following command:

	gpg --verify tor-browser-2.2.33-2_en-US.exe.asc tor-browser-2.2.33-2_en-US.exe

The output should say *"Good signature"*. A bad signature means that the
file may have been tampered with. If you see a bad signature, send
details about where you downloaded the package from, how you verified
the signature, and the output from GnuPG in an email to
<community-support@lists.torproject.org>.

How to Use the Tor Browser Bundle
---------------------------------
After downloading the Tor Browser Bundle and extracting the package, you
should have a directory with a few files in it. One of the files is an
executable called "Start Tor Browser" (or start-tor-browser, depending
executable called "Start Tor Browser" (or "start-tor-browser", depending
on your operating system). 

When you run this file, Vidalia will start up and connect you to the Tor
@@ -99,28 +163,17 @@ proxy to access the rest of the Tor Network.

Frequently Asked Questions
--------------------------
*TBD*
This section will answer some of the most common questions asked on
tor-assistants and community-support. If your question is not mentioned
here, please send an email to <community-support@lists.torproject.org>
and we'll get back to you as soon as possible.

### Can not Get the Package from GetTor
Some of the packages offered by GetTor are rather large and needs your
email provider to allow for attachments of about 30MB in size. The limit
for Gmail, for example, is 25MB. If you can not get the package you want
from GetTor, try downloading it directly from one of our mirrors:

Mirror 1:
  [Tor Browser Bundle for Mac OS X](http://tor.ccc.de/dist/torbrowser/osx/)
  [Tor Browser Bundle for Linux](http://tor.ccc.de/dist/torbrowser/linux/)

Mirror 2:
  [Tor Browser Bundle for Mac OS X](https://www.torservers.net/mirrors/torproject.org/dist/torbrowser/osx/)
  [Tor Browser Bundle for Linux](https://www.torservers.net/mirrors/torproject.org/dist/torbrowser/linux/)

Mirror 3:
  [Tor Browser Bundle for Mac OS X](https://www.oignon.net/dist/torbrowser/osx/)
  [Tor Browser Bundle for Linux](https://www.oignon.net/dist/torbrowser/linux/)

If any of the mirrors listed above are blocked, please let us know by
sending an email to <community-support@lists.torproject.org>.
from GetTor, send an email to <community-support@lists.torproject.org>
and we will give you a list of mirrors to use.

### Unable to Extract the Archive
If you are using Windows and find that you can not extract the archive,
@@ -157,16 +210,15 @@ Tor Project website.
### Flash Does not Work 
For security reasons, Flash, Java, and and other plugins are currently
disabled for Tor. These can be used to track users and compromise their
anonymity in other ways. Please see the [Torbutton FAQ]
(https://www.torproject.org/torbutton/torbutton-faq.html.en#noflash) for
more information.
anonymity in other ways. Please see the [Torbutton FAQ](https://www.torproject.org/torbutton/torbutton-faq.html.en#noflash) 
for more information.

### I Want to Use Another Browser
For security reasons, we only recommend using Tor with Firefox and the
Torbutton extension. It is technically possible to use Tor with other
browsers, but by doing so you may open yourself up to potential attacks.

### My Question is not Mentioned Here
If your question is not mentioned in this document, please send an email
to <community-support@lists.torproject.org> and we'll get back to you as
soon as possible.
### Why Tor is Slow
Tor can sometimes be a bit slower than your normal Internet connection. Your
traffic is sent through servers in various parts of the world, and some
bottlenecks and network latency will always be present.