[tor-bugs] #6458 [Applications/Tor Browser]: Double-key HSTS for third party content

Tue Aug 30 05:05:43 UTC 2016

#6458: Double-key HSTS for third party content
-------------------------------------------------+-------------------------
 Reporter:  mikeperry                            |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:  new
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  tbb-linkability, tbb-bounty, tbb-    |  Actual Points:
  firefox-patch                                  |
Parent ID:                                       |         Points:
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by arthuredelstein):

 Here's another Mozilla ticket that seems like the way to go. HSTS could be
 isolated by OriginAttributes, which are going to include first party
 domain.
 https://bugzilla.mozilla.org/show_bug.cgi?id=1253006

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6458#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online