[tor-bugs] #10550 [EFF-HTTPS Everywhere]: Stackexchange: Unable to login with OpenID

[Tor Bug Tracker & Wiki]

#10550: Stackexchange: Unable to login with OpenID
----------------------------------+---------------------
 Reporter:  bastik                |          Owner:  pde
     Type:  defect                |         Status:  new
 Priority:  normal                |      Milestone:
Component:  EFF-HTTPS Everywhere  |        Version:
 Keywords:                        |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+---------------------
 HTTPS-E 3.4.5 (Firefox, I can't pick the version of HTTPS-E in "version")
 ships with a ruleset for Stackexchange, which appears to make it
 impossible to lock in with Stackexchange as OpenID provider into
 tor.stackexchange (probably not exclusive).

 I get the following message:

 > Unable to log in with your OpenID provider:
 > The openid.return_to parameter
 (http://tor.stackexchange.com/users/authenticate/?s=07cba8ea-00a3-452c-
 afe9-c9cd9cdf0fcd&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.stackexchange.com%2Fuser%2Fde3605ff-5114-405c-8586-7da2e86aee49)
 does not match the actual URL
 (https://tor.stackexchange.com/users/authenticate/?s=07cba8ea-00a3-452c-
 afe9-c9cd9cdf0fcd&dnoa.userSuppliedIdentifier=https%3A%2F%2Fopenid.stackexchange.com%2Fuser%2Fde3605ff-5114-405c-8586-7da2e86aee49&openid.claimed_id=https%3A%2F%2Fopenid.stackexchange.com%2Fuser%2Fde3605ff-5114-405c-8586-7da2e86aee49&openid.identity=https%3A%2F%2Fopenid.stackexchange.com%2Fuser%2Fde3605ff-5114-405c-8586-7da2e86aee49&openid.sig=uUaY0f582F%2Fl2lMOvJIXknNt4jnx32V1TGYOvoU1R9s%3D&openid.signed=claimed_id%2Cidentity%2Cassoc_handle%2Cop_endpoint%2Creturn_to%2Cresponse_nonce%2Cns.alias3%2Calias3.mode%2Calias3.type.alias1%2Calias3.value.alias1%2Calias3.type.alias2%2Calias3.value.alias2&openid.assoc_handle=1Ltb
 %21IAAAAD8uVCcj4mk1jQ1KN8GqP6L3xHscKnUDlPYVu3EEfzhEQQAAAAEWJI_xASt4X3UwqAVC41PsXEcSE7G9ckp4d-
 NB8Ib2sQCWPIK7eSvidd_Hwn8m6az7LiO4L_u1ZZGObLOiKV5V&openid.op_endpoint=https%3A%2F%2Fopenid.stackexchange.com%2Fopenid%2Fprovider&openid.return_to=http%3A%2F%2Ftor.stackexchange.com%2Fusers%2Fauthenticate%2F%3Fs
 %3D07cba8ea-00a3-452c-
 afe9-c9cd9cdf0fcd%26dnoa.userSuppliedIdentifier%3Dhttps%253A%252F%252Fopenid.stackexchange.com%252Fuser%252Fde3605ff-5114-405c-8586-7da2e86aee49&openid.response_nonce=2014-01-04T08%3A46%3A44ZnweqDPDq&openid.mode=id_res&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.ns.alias3=http%3A%2F%2Fopenid.net%2Fsrv%2Fax%2F1.0&openid.alias3.mode=fetch_response&openid.alias3.type.alias1=http%3A%2F%2Faxschema.org%2Fcontact%2Femail&openid.alias3.value.alias1=[redacted
 email-
 address]&openid.alias3.type.alias2=http%3A%2F%2Faxschema.org%2FnamePerson&openid.alias3.value.alias2=[redacted
 name]) the request was made with.


 This is bad, you know?

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10550>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online