[tor-bugs] #3429 [TorBrowserButton]: Referer blocking option breaks browser navigation

[Tor Bug Tracker & Wiki]

#3429: Referer blocking option breaks browser navigation
------------------------------+---------------------------------------------
 Reporter:  Anna              |          Owner:  mikeperry
     Type:  defect            |         Status:  new      
 Priority:  major             |      Milestone:           
Component:  TorBrowserButton  |        Version:           
 Keywords:                    |         Parent:           
   Points:  2                 |   Actualpoints:           
------------------------------+---------------------------------------------

Comment(by mikeperry):

 joyton: This is not a high priority for us because we believe a determined
 adversary still has the information channels available to transmit referer
 information in other ways. For example, are you aware that the Google+ +1
 buttons already subvert your referer spoofing by transmitting the url in
 the request parameters? They do this so that they can still display the
 count for people who block referers... Since this is impossible to prevent
 in a real sense (imagine encrypted url parameters), our plan is to simply
 prevent them from tracking you between sites.

 I linked you the Tor Blog post that explains this reasoning as part of one
 of it's points in the NoScript bug (for others:
 https://blog.torproject.org/blog/improving-private-browsing-modes-do-not-
 track-vs-real-privacy-design), but we also discussed this particular issue
 on tor-dev in this thread: https://lists.torproject.org/pipermail/tor-
 dev/2011-June/002801.html.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3429#comment:17>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online