[tor-bugs] #13093 [EFF-HTTPS Everywhere]: MiTM in the wild: Merge localbitcoins.com rule from master:
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Sep 8 19:17:17 UTC 2014
#13093: MiTM in the wild: Merge localbitcoins.com rule from master:
----------------------------------+----------------------------------
Reporter: cypherpunks | Owner: zyan
Type: enhancement | Status: new
Priority: major | Milestone: HTTPS-E 4 stable
Component: EFF-HTTPS Everywhere | Version:
Keywords: httpse-ruleset-bug | Actual Points:
Parent ID: | Points:
----------------------------------+----------------------------------
Can you please merge Localbitcoins.com.xml from master into a stable
release?
- It's a straightforward rule from March 2013
- The site uses Strict-Transport-Security
- Yesterday, I witnessed a self-signed MiTM attempt against the site. It's
likely that exit nodes are running sslstrip too
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13093>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list