READ BEFORE INSTALLING

This is a translation. The French version is the reference; in case of discrepancy,
the French version prevails (French version: AVERTISSEMENT-INSTALLATION.txt).

AdHole blocks ads and refuses cookie banners. To do this on HTTPS sites, it has to
read this browser's traffic. In practice:

1. It installs on this machine a ROOT CERTIFICATE generated right here. This
   certificate allows AdHole, and AdHole alone, to decrypt the pages you visit.
2. It sets itself up as the proxy for your session.
3. It installs a service that starts with the computer, and a local DNS filter.

What this means, plainly:

- The private key of this certificate is created on THIS machine and never leaves it.
  It is unique to you, and access to it is restricted to this computer's
  administrators. Anyone who obtained this file could read your traffic: it is kept in
  the "ca" folder of AdHole's data; do not copy it anywhere.
- A list of sites that are NEVER decrypted is shipped with the program: system
  updates, game stores, encrypted messaging, payment services, video streams.
  This list cannot be exhaustive. CHECK IT AND ADD TO IT in the settings with the
  sites you do not want to see decrypted: bank, health, taxes.
- Nothing about your browsing is sent to the publisher: only the DNS resolver
  (Cloudflare by default) sees the names of the sites requested. Only an anonymous
  statistic goes to the publisher each day (a number drawn at random and changed every
  month, the version, the system, and the number of requests blocked since the previous
  check), to count installations and to show on the website the total number of requests
  blocked. That count is a plain number: no domain name, no address, no browsing date. It
  can be turned off in the settings.

- ADHOLE STARTS AUTOMATICALLY WITH THE COMPUTER. It stays active in the background (on
  Windows, with an icon near the clock).
- CLOSING ITS WINDOW DOES NOT STOP IT. To stop it: on Windows, right-click the icon
  near the clock, then "Stop AdHole"; on Linux, "sudo adhole arreter".

- AdHole changes this computer's DNS setting. If one day no site opens any more,
  run "adhole dns off" in an administrator command prompt ("sudo adhole dns off"
  on Linux): the connection comes back at once. "adhole arreter" stops everything
  cleanly.
- Uninstalling removes the certificate, the service and the proxy (on Linux:
  "sudo adhole teardown").

If you are not comfortable with how this works, do not install. The DNS filter alone,
which decrypts nothing, remains possible: see the documentation.
