[tor-bugs] #2098 [Trac]: Tor Trac sets cookies over HTTPS that can be sent over cleartext HTTP

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu Nov 18 21:24:38 UTC 2010


#2098: Tor Trac sets cookies over HTTPS that can be sent over cleartext HTTP
----------------------+-----------------------------------------------------
 Reporter:  rransom   |       Owner:  erinn   
     Type:  defect    |      Status:  accepted
 Priority:  critical  |   Milestone:          
Component:  Trac      |     Version:          
 Keywords:            |      Parent:          
----------------------+-----------------------------------------------------

Comment(by rransom):

 Both `trac_auth` and `trac_form_token` are now secured.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2098#comment:8>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list