From 48e413d79e7665594b281af818dff6b8a15aa29a Mon Sep 17 00:00:00 2001 From: Frank Denis Date: Sun, 25 Nov 2012 12:44:44 -0800 Subject: [PATCH] Make it clear that the "fallback to insecure" thing renders the whole thing useless against active attacks, not dnscrypt itself. --- DNSCrypt-Preference-Pane/DNSCrypt/extra/html/about.haml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/DNSCrypt-Preference-Pane/DNSCrypt/extra/html/about.haml b/DNSCrypt-Preference-Pane/DNSCrypt/extra/html/about.haml index 4c55eb5..ebc1f64 100644 --- a/DNSCrypt-Preference-Pane/DNSCrypt/extra/html/about.haml +++ b/DNSCrypt-Preference-Pane/DNSCrypt/extra/html/about.haml @@ -28,7 +28,8 @@ portal before you can access external networks. This function is only provided for conveniency. When enabled, the protocol can be easily downgraded by - third-parties. In other words, when enabled, this software doesn't + third-parties. In other words, when the "Fallback to + insecure" feature is enabled, this software doesn't provide any security at all against active attackers, but it can still be useful against passive attackers and in order to bypass DNS censorship. Don't enable it unless you are frequently