[tor-bugs] #8890 [EFF-HTTPS Everywhere]: Observatory submissions don't use browser's SOCKS proxy settings

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu May 16 21:48:25 UTC 2013


#8890: Observatory submissions don't use browser's SOCKS proxy settings
----------------------------------+-----------------------------------------
 Reporter:  schoen                |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:     
Component:  EFF-HTTPS Everywhere  |        Version:     
 Keywords:                        |         Parent:     
   Points:                        |   Actualpoints:     
----------------------------------+-----------------------------------------
 When I set a SOCKS proxy for my browser to browse over an SSH tunnel, I
 found that HTTPS Everywhere was still trying to make direct (non-proxied)
 connections to observatory6.eff.org to submit its certificate
 observations.  This is potentially bad from a privacy point of view and
 might also cause the observations to be easier for a network adversary to
 block, because it's very clear where they're headed.

 The Observatory submissions should probably respect the browser's proxy
 settings.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8890>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list