this is what diigo toolbar did when I access google.com (captured by Live HTTP Headers):

http://toolbar3.diigo.com/chappai/pv=13/ct=tb/cv=3.1.6.13/user=dreamxway/cmd=bm_loadBookmark/

POST /chappai/pv=13/ct=tb/cv=3.1.6.13/user=dreamxway/cmd=bm_loadBookmark/ HTTP/1.1
Host: toolbar3.diigo.com
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; zh-CN; rv:1.9.0.7) Gecko/2009021910 Firefox/3.0.7
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-cn,en-us;q=0.7,zh;q=0.3
Accept-Encoding: gzip,deflate
Accept-Charset: gb2312,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Content-Length: 205
Cookie: __utma=17482284.2222233902029870000.1228714702.1236220641.1236932385.6; __utmz=17482284.1228714702.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); CHKIO=c7b8aa7d0f4dfca3882b05af9c69c7eb; diigoandlogincookie=f1-.-dreamxway-.-20-.-0; _smasher_session=be5626017837bd199618afa13cd4244b; __utmb=17482284.4.10.1236932385; __utmc=17482284
Pragma: no-cache
Cache-Control: no-cache
cmd=bm_loadBookmark&v=13&_nocache=0.4808140182866636&json=%7B%22url%22%3A%22http%3A%2F%2Fwww.google.com%2F%22%2C%22what%22%3A%22pageComments%20annotations%22%2C%22loadFromGroups%22%3Atrue%7D&user=dreamxway

HTTP/1.x 200 OK
Server: DiigoWebServer/1.0.0
Date: Fri, 13 Mar 2009 08:35:34 GMT
Content-Type: text/plain; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: _smasher_session=be5626017837bd199618afa13cd4244b; domain=diigo.com; path=/
X-Runtime: 0.05680
Etag: "aa4ae53a74893777c2624e3d8f9a42a6"
Cache-Control: private, max-age=0, must-revalidate
Content-Encoding: gzip


I'm not sure but it seems like diigo can get my entire browsing history by this.

Is that what diigo indeed want to do?