[tor-bugs] #6197 [EFF-HTTPS Everywhere]: HTTPS Everywhere causes email address foo at gmail.com to be redirected to foo at mail.google.com incorrectly

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon Jun 18 15:26:32 UTC 2012


#6197: HTTPS Everywhere causes email address foo at gmail.com to be redirected to
foo at mail.google.com incorrectly
---------------------------------------------+------------------------------
 Reporter:  alexmuller                       |          Owner:  pde
     Type:  defect                           |         Status:  new
 Priority:  normal                           |      Milestone:     
Component:  EFF-HTTPS Everywhere             |        Version:     
 Keywords:  gmail, google, https everywhere  |         Parent:     
   Points:                                   |   Actualpoints:     
---------------------------------------------+------------------------------
 Today I received an email that I wanted to opt out of (unsubscribe from).
 The URL given to opt out (in the footer) is:

 http://careers.stackoverflow.com/email/optout/myemailaddress@gmail.com/CpEzg

 The Chrome extension causes this URL to be redirected to:

 http://careers.stackoverflow.com/email/optout/myemailaddress@mail.google.com/CpEzg

 ...where obviously the token given at the end of the URL doesn't match my
 email address, so the unsubscribe functionality is broken.

 I've verified this is caused by the HTTPS Everywhere extension - disabling
 the extension causes the link to not be redirected. Nothing is displayed
 in the console, and the original GET is displayed as Pending in the Chrome
 network inspector.

 Chrome extension version: 2012.5.1

 Many thanks,

 Alex

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6197>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list