A cocoon to protect us stoopid lusers from ourselves

[t0p]

My usual meanderings around the interwebz, related to current affairs, online rights and freedoms, anonymity, (in)security etc, turned up what might be a very interesting pebble: Cocoon. There's a blog entry here (http://blog.getcocoon.com/) explaining why, in this age of online "good guys" and "bad guys", we might need Cocoon; and this page (https://getcocoon.com/support/download) holds your hand as you install the Firefox add-on.

My initial, perfunctory investigations were, as far as they go, pretty good: while browsing through the add-on, a whois enquiry said I was using a Hurricane Electric ip address (I'm not), and Google seem to think I'm in Michigan (not even the right continent). Later on I'll subject it to some more strenuous testing. But my initial findings look ok for a casual user.

If anyone has comments about Cocoon, please share them. In the Age of Information, information is power. And, let's face it, with the motley cast of characters running the show right now, we need all the power we can get.

Oh, and please, no comments like "if you've nothing to hide you've nothing to fear." In some realities, saying guff like that would get you taken round the back of the chemical sheds and shot.

[handy]

Thanks for the heads up t0p.

Cocoon looks like a good prophylactic.

Shame it doesn't work with Firefox 6.* yet, I'll give it a try as soon as it does.

& I'm with you all the way on the behind the chemical shed thing... #-o

[t0p]

No one else tried Cocoon? No more opinions/facts/rumours to spread? I was kinda hoping some users would post something here.

Anyone here use HTTPS-Everywhere (https://www.eff.org/https-everywhere)? Is there any point in using the 2 add-ons together, or do they have completely different functionality? Anything?

[Alwimo]

I like the EFF and donate to them (and will continue to do so), but calling the add-on "HTTPS Everywhere" could be dangerous as it gives people a sense of security on sites that don't get the extra security. They make it clear that it isn't actually for every site, but I think the name is still a problem.

I'll look more into Cocoon.

[sisco311]

No more opinions/facts/rumours to spread?Anything?

If you are looking for facts and opinions from knowledgeable people, then try the Security Discussions forum.

[Oxwivi]

Anyone here use HTTPS-Everywhere (https://www.eff.org/https-everywhere)?

I'm in the process of trying out Cocoon (and not sure what it does, yet). But HTTPS Everywhere simply directs you to HTTPS connections wherever available - for example, if you go to [blog name].wordpress.com, normally you'd get the page using the HTTP connection, but with HTTPS Everywhere, it automagically upgrades to the secure HTTPS.

[Oxwivi]

Hmm, so it's basically a proxy. Yes, I think there's merit in using it in tandem with HTTPS Everywhere since it will encrypt Cocoon to destination server's connection (and even prevent Cocoon themselves from snooping, unless they somehow modify how the traffic is sent/received).

[handy]

I've been using Cocoon on & off for bit. Sometimes there is a little lag, not bad though, & when using it, it my surfing experience isn't quite as smooth & streamlined as when I'm not.

It has caused Firefox to crash sometimes, though I'm using Firefox version 6.*.*, which the Cocoon website says (last time I looked) is not yet supported. Even so, it IS working, as my IP is different & in California whereas I'm in Oz.

Anyway, I'll keep my eye on it, as I expect it to improve in many ways as time goes on.

I think it is a great thing, & will help some people in countries that have limitations on their internet freedom.

[Oxwivi]

I'm in development Oneiric, with Firefox 7. Works.