[tbb-bugs] #24816 [Applications/Tor Browser]: Tor Browser is not your privacy browser, Non-goal: PRIVACY

Tor Bug Tracker & Wiki blackhole at torproject.org
Mon Jan 8 23:28:07 UTC 2018

#24816: Tor Browser is not your privacy browser, Non-goal: PRIVACY
 Reporter:  cypherpunks               |          Owner:  tbb-team
     Type:  task                      |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Major                     |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:  #24351                    |         Points:
 Reviewer:                            |        Sponsor:

Comment (by cypherpunks):

 Replying to [comment:7 cypherpunks]:
 > LOL if I go to https://kproxy.com to visit https://github.com, should
 the browser inform me that my connection is insecure because kproxy is
 essentially MiTM? Of course not! So why should it do exactly that for
 sites behind kproxy, uh, I mean Cloudflare?

 You do realize you're connecting to KPROXY.COM right? Going beyond that
 isn't MITM because you do know your destination server is KPROXY.COM.

 You ============ KPROXY.COM

 The problem is Cloudflare websites. You never notice you are connecting to

 Expected result:
 You ============ WTF.COM

 Actual result:
 You =====CF:)=== WTF.COM

Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24816#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online

More information about the tbb-bugs mailing list