[tor-bugs] #3600 [TorBrowserButton]: Prevent redirects from transmitting+storing cookies+identifiers (was: Prevent redirects from storing cookies+identifiers)

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon Apr 16 18:03:57 UTC 2012


#3600: Prevent redirects from transmitting+storing cookies+identifiers
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry                    
     Type:  defect            |         Status:  new                          
 Priority:  major             |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  TorBrowserButton  |        Version:                               
 Keywords:                    |         Parent:                               
   Points:                    |   Actualpoints:                               
------------------------------+---------------------------------------------

Comment(by mikeperry):

 To be clear, the property that bugs me is that it is fully automatic and
 non-consensual.  I think we can get the behavior we want if we do not
 transmit the cookies to accounts.google.com on the redirect, but we'll
 need to test it.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3600#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list