>>17A freesite may embed or link to pictures or other content. In case this is not done through the .gnunet-Address, but the usual address (http://www.mysite.com/title.jpg, for example), the requester looses anonymity when requesting the content: the request does not get routed through GNUnet, but a normal - maybe not encrypted - direct connection to the destination server. To circumvent this, an additional proxy server has to be added in front of the SOCKS proxy. This proxy checks every "normal" request whether it is the result of a link on an anonymous page (through the HTTP header "Referrer"). In this case, a warning message is returned first.
This is shit. Why does it not just block unsafe/non-anonymous requests by default? Now I have to write a fucking intermediate SOCKS proxy just to filter them out. Fuck.
