Update you-need-to-know.html

[mode80]

For better or worse, Tor has its negative connotations. If it must be mentioned, it shouldn't be confused as a requirement for casual use. 

[saivann]

I don't want to sound too grumpy, but :

While I understand that using Tor for a new user might be cumbersome, it is clearly not a luxury. Any transaction today have its source relay IP loggued permanently and publicly worldwide. Just look at any transaction on blockchain.info and you will find its source relay IP. That is a huge privacy concern to me.

Until online wallets get more serious, non-technical people still need to protect their money and their privacy by their own (or at least be aware that they have to). I think we should not hide or mitigate these facts. It is the role of the "You need to know" page to give these warnings and to be accurate, even if it's not pleasant to read.

[mode80]

Not reading you as grumpy. I very much like spirit of the need-to-know page and what you've done with the site in general.

It takes more than what's on blockchain.info to ID someone. But a since a "persistant, motivated attacker" could do it through other means, perhaps even the Tor reference should stay.

[saivann]

That being said, that is only my opinion.

I think it is more about bulk analysis. And the fact that the data is public forever. That means it doesn't take very much to break years of weak privacy in many cases. Targetting one specific individual might indeed not be the most important concern here.