[tor-bugs] #10424 [Tor Sysadmin Team]: torproject.org doesn't send an HSTS header

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Dec 25 13:55:51 UTC 2013


#10424: torproject.org doesn't send an HSTS header
-----------------------------------+--------------------
     Reporter:  zyan               |      Owner:
         Type:  enhancement        |     Status:  closed
     Priority:  major              |  Milestone:
    Component:  Tor Sysadmin Team  |    Version:
   Resolution:  fixed              |   Keywords:
Actual Points:                     |  Parent ID:
       Points:                     |
-----------------------------------+--------------------

Comment (by cypherpunks):

 Replying to [comment:8 zyan]:

 > Some ways that users hit http://torproject.org:
 > 1. Links in posts like this one from a couple minutes ago:
 https://twitter.com/NOORALDAIN/status/415709547047567360. If you type
 torproject.org on Twitter, it gets converted to http://torproject.org

 It appears twitter is dumb then. Users get what they deserve by following
 twitter links.

 > 2. If you type in torproject.org in the browser's URL bar, the same
 thing happens.

 I wager a bet where the vast majority go to google, type torproject.org,
 and are correctly pointed at https://www.torproject.org

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10424#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list