[tor-bugs] #7179 [EFF-HTTPS Everywhere]: Ths SSL Observatory feature leaks DNS requests without the TBB

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Apr 16 07:21:52 UTC 2013


#7179: Ths SSL Observatory feature leaks DNS requests without the TBB
----------------------------------+-----------------------------------------
 Reporter:  gk                    |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  critical              |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------

Comment(by pde):

 This bug is marked "critical".  A few points about this:

  - the leak only occurs when the user runs tor (or maybe jondo too?)
  - the serves to indicate that the user is running tor + https everywhere
  - that's not terrible for most tor users, but maybe it's actually Bad™ if
 you're using a bridge?

 If the latter is true we should actually push through one of those ugly
 fixes.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7179#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list