[tbb-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Dec 11 21:38:23 UTC 2017

#24351: Block Global Active Adversary Cloudflare
 Reporter:  nullius                              |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  needs_information
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:
 Reviewer:                                       |        Sponsor:

Comment (by nullius):

 Replying to [comment:25 cypherpunks]:
 > https://addons.mozilla.org/en-US/firefox/addon/block-cloudflare-mitm-
 > Test header data --> if cloudflare --> forcefully redirect to
 localhost(terminate connection)

 Thank you!  “Cypherpunks write code.”

 To facilitate further development, I have created a Github repository:


 My commit-signing PGP key fingerprint (also used for e-mail):

 Please note well [https://github.com/nym-
 zone/block_cloudflare_mitm_fx/issues/5 Issue #5, Refactor for future
 integration with other add-ons].  I hope to use the Github repo to
 cultivate this idea, test the best means of achieving our goals, and then
 refactor out a patch which can be brought back to this Tor Browser bug for
 addition to Torbutton.

 I am admittedly not much of a Javascript developer; but I can handle
 gritty maintenance tasks, and perhaps pick up some new Mozilla add-on
 skills along the way.  Help is appreciated.  Let this be the initial seed
 of a grassroots community response to the Cloudflare MITM threat!

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list