[tbb-bugs] #9623 [Tor Browser]: Referers being sent from hidden service websites
Tor Bug Tracker & Wiki
blackhole at torproject.org
Fri Oct 2 22:44:49 UTC 2015
#9623: Referers being sent from hidden service websites
-----------------------------+---------------------------
Reporter: cypherpunks | Owner: tbb-team
Type: defect | Status: new
Priority: major | Milestone:
Component: Tor Browser | Version:
Resolution: | Keywords: tbb-torbutton
Actual Points: | Parent ID:
Points: | Sponsor:
-----------------------------+---------------------------
Comment (by cypherpunks):
This is being actively exploited in the wild to discover Tor Hidden
Services by sniffers on or around bad exits. Please ensure that TBB *at
least* refuses to send referrers over plaintext communications channels
(eg: port 80).
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9623#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list