[tbb-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

[Tor Bug Tracker & Wiki]

#24351: Block Global Active Adversary Cloudflare
-------------------------------------------------+-------------------------
 Reporter:  nullius                              |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  needs_information
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by nullius):

 Replying to [comment:25 cypherpunks]:
 > https://addons.mozilla.org/en-US/firefox/addon/block-cloudflare-mitm-
 attack/
 >
 > Test header data --> if cloudflare --> forcefully redirect to
 localhost(terminate connection)

 Thank you!  “Cypherpunks write code.”

 To facilitate further development, I have created a Github repository:

 https://github.com/nym-zone/block_cloudflare_mitm_fx

 My commit-signing PGP key fingerprint (also used for e-mail):
 0xC2E91CD74A4C57A105F6C21B5A00591B2F307E0C

 Please note well [https://github.com/nym-
 zone/block_cloudflare_mitm_fx/issues/5 Issue #5, Refactor for future
 integration with other add-ons].  I hope to use the Github repo to
 cultivate this idea, test the best means of achieving our goals, and then
 refactor out a patch which can be brought back to this Tor Browser bug for
 addition to Torbutton.

 I am admittedly not much of a Javascript developer; but I can handle
 gritty maintenance tasks, and perhaps pick up some new Mozilla add-on
 skills along the way.  Help is appreciated.  Let this be the initial seed
 of a grassroots community response to the Cloudflare MITM threat!

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:26>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online