Tor Browser<span class="application">[Tor Browser](https://www.torproject.org)</span> is a rwebranded version of the [ browser based on [Mozilla Firefox|](https://www.mozilla.comorg/firefox/]] web browser. Given its popularity many of you have probably used it before and its user interface is like any other modern web browser.) but configured to protect your privacy.
<span class="application">[Tor Browser](https://www.torproject.org)</span>is a web browser based on [Mozilla Firefox](https://www.mozilla.org/firefox/) but configured to protect your privacy.
<h1 id="https-everywhere">HTTPS encryption with HTTPS Everywhere</h1>
40
All the data exchanged between your browser and the server you are visiting are encrypted. ItUsing HTTPS instead of HTTP encrypts your communications with the website and prevents the [[Tor exit node to eavesdrop onfrom intercepting your communications|doc/about/warnings/tor#exit_node]].
Using HTTPS instead of HTTP encrypts your communications with the website and prevents the [[Tor exit node from intercepting your communications|about/warnings/tor#exit]].
41
For example, here is how the browser looks like when we try to log in to an email account at [lavabit.comriseup.net](https://lavabit.comriseup.net/), using their [webmail interface](https://lavabit.com/apps/webmail/src/login.phpmail.riseup.net/):
For example, here is how the browser looks when we try to log in to an email account at [riseup.net](https://riseup.net/), using their [webmail interface](https://mail.riseup.net/):
43
Notice the small areapadlock icon on the left of the address bar saying "lavabit.com" on a blue background andmail.riseup.net".Notice also the address beginning with "https://" (instead of "http://"):. These are the indicators that an encrypted connection using [[!wikipedia HTTPS]] is being used.
Notice the padlock icon on the left of the address bar saying "mail.riseup.net".Notice also the address beginning with "https://" (instead of "http://"). These are the indicators that an encrypted connection using [[!wikipedia HTTPS]] is being used.
44
You should try to only use services providing HTTPS wWhen you are sending or retrieving sensitive information (like passwords), oyou should try to only use services providing HTTPS. Otherwise, it is very easy for an eavesdropper to steal whatever information you are sending, or to modify the content of a page on its way to your browser.
When you are sending or retrieving sensitive information (like passwords), you should try to only use services providing HTTPS. Otherwise, it is very easy for an eavesdropper to steal whatever information you are sending, or to modify the content of a page on its way to your browser.
45
[HTTPS Everywhere](https://www.eff.org/https-everywhere) is a Firefox extension shipped in Tails and included in <span class="application">Tor Browser</span>. It is produced as a collaboration between [The Tor Project](https://torproject.org/) and the [Electronic Frontier Foundation](https://eff.org/). It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For instancexample, they mayight default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.
[HTTPS Everywhere](https://www.eff.org/https-everywhere) is a Firefox extension included in <span class="application">Tor Browser</span>. It is produced as a collaboration between [The Tor Project](https://torproject.org/) and the [Electronic Frontier Foundation](https://eff.org/). It encrypts your communications with a number of major websites. Many sites on the web offer some limited support for encryption over HTTPS, but make it difficult to use. For example, they might default to unencrypted HTTP, or fill encrypted pages with links that go back to the unencrypted site. The HTTPS Everywhere extension fixes these problems by rewriting all requests to these sites to HTTPS.
46
To learn more about HTTPS Everywhere, you can see:
<h1 id="javascript">Protection against dangerous JavaScript</h1>
50
Having all JavaScript disabled by default would disable a lot of harmless and possibly useful JavaScript, and might render unusable many websites unusable.
For more technical details you can refer todetails, see the [design and implementation of the [Tor Browser design document](https://2019.www.torproject.org/projects/torbrowser/design/#new-identity).
<h1 id="noscript">NoScript to have even more control over JavaScript</h1>
78
To allow more control over JavaScript, for example to disable JavaScript
completely, Tails<span class="application">Tor Browser</span> includes the <span class="application">NoScript</span>extension. to:
