[tbb-bugs] #18152 [Tor Browser]: TBB should better indicate the security of hidden services

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Jan 26 07:31:12 UTC 2016


#18152: TBB should better indicate the security of hidden services
-----------------------------+----------------------
     Reporter:  strugee      |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  Low          |  Milestone:
    Component:  Tor Browser  |    Version:
     Severity:  Normal       |   Keywords:
Actual Points:               |  Parent ID:
       Points:               |    Sponsor:
-----------------------------+----------------------
 Currently when the user visits a .onion address, the Tor Browser Bundle
 does the same thing it does for HTTP-only sites: it shows the generic
 globe next to the URL which, when clicked, states that "your connection to
 this website is not encrypted." Since it's a hidden service, this is
 clearly not true. Furthermore, clicking "more information" says that the
 website doesn't support encryption and that the request can be seen by
 other people. Obviously both are not true.

 TBB should display something else instead, to indicate the security and
 privacy properties of the .onion domain.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/18152>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list