[tor-bugs] #6314 [TorBirdy]: prevent leak via Date header field (local timestamp disclosure)

Tor Bug Tracker & Wiki blackhole at torproject.org
Tue Feb 25 03:13:59 UTC 2014


#6314: prevent leak via Date header field (local timestamp disclosure)
--------------------------+----------------------
     Reporter:  tagnaq    |      Owner:  ioerror
         Type:  defect    |     Status:  new
     Priority:  major     |  Milestone:
    Component:  TorBirdy  |    Version:
   Resolution:            |   Keywords:  SponsorT
Actual Points:            |  Parent ID:  #9131
       Points:            |
--------------------------+----------------------

Comment (by saint):

 @sukhbir How married are you to the idea of removing dates entirely?
 Thunderbird doesn't parse dateless emails very well, as a rule, and even
 if patched there are other clients that could respond poorly.  Could
 reasonably lead to people thinking that they haven't received a message
 just by virtue of it being at the bottom of their mail queue.

 A better / less-problematic option might be to allow users to override
 time on a per-message basis (in the compose window).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6314#comment:11>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list