[tor-bugs] #21952 [Webpages]: .Onion everywhere?: increasing the use of onion services through automatic redirects and aliasing

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed Dec 6 23:50:45 UTC 2017


#21952: .Onion everywhere?: increasing the use of onion services through automatic
redirects and aliasing
----------------------+--------------------------
 Reporter:  linda     |          Owner:  linda
     Type:  project   |         Status:  reopened
 Priority:  Medium    |      Milestone:
Component:  Webpages  |        Version:
 Severity:  Normal    |     Resolution:
 Keywords:  ux-team   |  Actual Points:
Parent ID:            |         Points:
 Reviewer:            |        Sponsor:
----------------------+--------------------------

Comment (by arthuredelstein):

 Replying to [comment:46 phw]:

 > Also, I suppose a web site could display a very similar banner on its
 own, pretending that it's from Tor Browser. Should we worry about this?

 Yes, I imagine it could potentially be a problem, especially on an http
 site. One possible alternative we discussed on IRC is the idea of using a
 [https://developer.mozilla.org/en-
 US/docs/Mozilla/Using_popup_notifications popup notification] (aka
 doorhanger). The popup partially overlaps with browser chrome so it can't
 be spoofed by the content page.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/21952#comment:47>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list