[tbb-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Nov 29 15:25:58 UTC 2017


#24351: Block Global Active Adversary Cloudflare
-------------------------------------------------+-------------------------
 Reporter:  nullius                              |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  needs_information
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 Replying to [comment:21 nullius]:
 > Replying to [comment:18 cypherpunks]:
 > > It shouldn't extend to how someone sets up their website, otherwise it
 opens a slippery slope: why not block all websites because all servers
 have the backdoor that is Intel Management Engine or AMD's Platform
 Security Processor?
 >
 > For the purposes of this bug, suggestions that some shadowy somebody may
 be using a hardware backdoor for the whole Internet do not equate to the
 certain knowledge that one clearly identified entity is ''in fact''
 performing realtime decryption of all TLS connections to millions of
 websites ''right now''.

 Do you have any actual evidence that they intercepted these decrypted
 packets ''and'' used them for their own malicious goals, or those of other
 3-letter entities? Otherwise this talk is pure gossip, and it belongs on
 tabloids of the DailyMail.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:22>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list