[tor-bugs] #6098 [Tor Check]: Add a hidden service to check.torproject.org

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Thu Jun 7 19:43:03 UTC 2012


#6098: Add a hidden service to check.torproject.org
-----------------------+----------------------------------------------------
 Reporter:  proper     |          Owner:     
     Type:  defect     |         Status:  new
 Priority:  critical   |      Milestone:     
Component:  Tor Check  |        Version:     
 Keywords:             |         Parent:     
   Points:             |   Actualpoints:     
-----------------------+----------------------------------------------------
 TorBrowser gets it's version information from
 https://check.torproject.org/RecommendedTBBVersions and
 https://check.torproject.org/ is TBB's homepage.

 For an adversary, it's granted, that every user of Tor Browser will visit
 that page. It must be too tempting to MITM that site and to spread some
 malicious content.

 The SSL certificate authority system was recently compromised and is
 flawed by design. I suggest making check.torproject.org accessible through
 a hidden service.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6098>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list