[tor-bugs] #12146 [meek]: Firefox meek-http-helper leaks Host header in CONNECT requests

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 28 17:39:20 UTC 2014


#12146: Firefox meek-http-helper leaks Host header in CONNECT requests
------------------------+--------------------
     Reporter:  dcf     |      Owner:  dcf
         Type:  defect  |     Status:  new
     Priority:  major   |  Milestone:
    Component:  meek    |    Version:
   Resolution:          |   Keywords:
Actual Points:          |  Parent ID:  #10935
       Points:          |
------------------------+--------------------

Comment (by dcf):

 For reference, when you use meek-client without the browser extension,
 proxy requests look like:
 {{{
 CONNECT www.google.com:443 HTTP/1.1
 Host: www.google.com:443
 User-Agent: Go 1.1 package http
 }}}

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/12146#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list