When testing live web apps that allow / encourage security research & disclosure should I be routing my traffic through Tor?
Is there a good reason not to?
Does it imply a certain malicious intent that I'd be trying to mask the source of my traffic? Or is it a good precaution to take in case someone misinterprets my poking around?
I've been practicing on VMs locally and I'd like to start testing on some of these sites that aren't hostile to security research but I'm not sure if there's a certain etiquette to follow (beyond their posted guidelines).