[tbb-bugs] #17069 [Applications/Tor Browser]: Use false SNI fields, DNS requests for all outgoing connections to cdn-hosted websites

Tue May 23 20:40:58 UTC 2017

#17069: Use false SNI fields, DNS requests for all outgoing connections to cdn-
hosted websites
--------------------------------------+--------------------------
 Reporter:  elypter                   |          Owner:  tbb-team
     Type:  enhancement               |         Status:  new
 Priority:  Low                       |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------

Comment (by dcf):

 Replying to [comment:9 tom]:
 > But since we send the ClientHello down the circuit before we've resolved
 the name, we have to detect the use of a CDN based off the DNS name alone.

 That's how CacheBrowser works, as I understand it. It has a database
 mapping DNS names to CDNs.
  *
 https://github.com/CacheBrowser/cachebrowser/blob/b653d7ad38a8e3824bab368b50f15dd9d1926140/cachebrowser/data/local_bootstrap.yaml
  * https://bootstrap.cachebrowser.net/#/hosts

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17069#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online