[tor-bugs] #24192 [Applications/Tor Browser]: When I visit a V3 onion that supplies a invalid certificate, torbrowser will lookup the onion when the get certifice button is clicked
Tor Bug Tracker & Wiki
blackhole at torproject.org
Tue Nov 14 15:04:54 UTC 2017
#24192: When I visit a V3 onion that supplies a invalid certificate, torbrowser
will lookup the onion when the get certifice button is clicked
--------------------------------------+--------------------------
Reporter: Dbryrtfbcbhgf | Owner: tbb-team
Type: defect | Status: new
Priority: High | Milestone:
Component: Applications/Tor Browser | Version:
Severity: Major | Resolution:
Keywords: | Actual Points:
Parent ID: | Points:
Reviewer: | Sponsor:
--------------------------------------+--------------------------
Comment (by Dbryrtfbcbhgf):
Replying to [comment:8 gk]:
> See: https://blog.mozilla.org/security/2013/07/29/ocsp-stapling-in-
firefox/ for some info about what OCSP stapling achieves.
When the button is pressed will Tor browser leak the onion address, to
some server?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24192#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list