[tor-bugs] #7179 [EFF-HTTPS Everywhere]: Ths SSL Observatory feature leaks DNS requests without the TBB

[Tor Bug Tracker & Wiki]

#7179: Ths SSL Observatory feature leaks DNS requests without the TBB
----------------------------------+-----------------------------------------
 Reporter:  gk                    |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  critical              |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------

Comment(by pde):

 This is Extremely Annoying.  We don't really want to inflict this
 performance hit on the whole browser in order to achieve confidentiality
 for DNS requests ''for a single domain'' :(.  If we could only get
 [https://bugzilla.mozilla.org/show_bug.cgi?id=644640 this API] to exist we
 could submit to the Observatory's IP address while verifying the server
 has a cert for observatory.eff.org.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7179#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online