[tor-bugs] #15933 [Applications/Tor Browser]: Relax domain isolation to use TLD instead of FQDN

Tor Bug Tracker & Wiki blackhole at torproject.org
Sat Sep 8 19:04:21 UTC 2018


#15933: Relax domain isolation to use TLD instead of FQDN
-------------------------------------------------+-------------------------
 Reporter:  maxim                                |          Owner:  tbb-
                                                 |  team
     Type:  defect                               |         Status:
                                                 |  reopened
 Priority:  Medium                               |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:                                       |     Resolution:
 Keywords:  tbb-torbutton, tbb-usability-        |  Actual Points:
  website, tbb-4.5-regression,                   |
  TorBrowserTeam201505R                          |
Parent ID:                                       |         Points:
-------------------------------------------------+-------------------------
Changes (by blagarg):

 * status:  closed => reopened
 * resolution:  fixed =>


Comment:

 This bug seems to be back as of v8.0.

 Example:

 1. Visit https://clicknupload.org/hg5f8qew62hm

 2. Create Download Link - Will create a link to something like
 https://fs21.clicknupload.net/files/0/-hash-/test.txt

 3. Tor circuit to "fs21.clicknupload.net" will be different than
 "clicknupload.org" and download will fail because our IP is not the same.

 I will try with v7.5.6 next, but I remember that this worked with the
 release I had before.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15933#comment:19>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list