[tor-bugs] #6314 [TorBirdy]: prevent leak via Date header field (local timestamp disclosure)

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jan 17 20:43:47 UTC 2014


#6314: prevent leak via Date header field (local timestamp disclosure)
--------------------------+----------------------
     Reporter:  tagnaq    |      Owner:  ioerror
         Type:  defect    |     Status:  new
     Priority:  major     |  Milestone:
    Component:  TorBirdy  |    Version:
   Resolution:            |   Keywords:  SponsorT
Actual Points:            |  Parent ID:  #9131
       Points:            |
--------------------------+----------------------

Comment (by heywoodj123@…):

 Did some more reading and found the explanation in an old 2012 tor-talk
 thread (https://lists.torproject.org/pipermail/tor-
 talk/2012-May/024370.html). Should have read that before posting -- sorry.

 However, I do share mikeperry's view as expressed in that thread: plugging
 the timezone leak by setting everything to UTC is good, but other than
 that I think the best way not to stick out is to use the default TB
 headers (in the default language).  Notwithstanding the arguments made in
 "Towards a Tor-safe Mozilla Thunderbird," the changes made by Torbirdy to
 TB's default reply headers make subsequent emails more distinctive, not
 less.

 -H

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6314#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list