[tor-bugs] #3600 [TorBrowserButton]: Prevent redirects from transmitting+storing cookies+identifiers

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Mon May 7 03:21:32 UTC 2012


#3600: Prevent redirects from transmitting+storing cookies+identifiers
------------------------------+---------------------------------------------
 Reporter:  mikeperry         |          Owner:  mikeperry                    
     Type:  defect            |         Status:  new                          
 Priority:  major             |      Milestone:  TorBrowserBundle 2.3.x-stable
Component:  TorBrowserButton  |        Version:                               
 Keywords:  tbb-linkability   |         Parent:                               
   Points:                    |   Actualpoints:                               
------------------------------+---------------------------------------------

Comment(by mikeperry):

 FTR: I might flip-flop on this one or two more times before we finally
 decide to try to solve it. Because identifiers can be encoded in GET
 parameters, the only way to really prevent transmission is to prompt the
 user before following the redirect....

 Anyone have any other comments/suggestions?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3600#comment:16>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list