[tor-bugs] #24351 [Applications/Tor Browser]: Block Global Active Adversary Cloudflare

[Tor Bug Tracker & Wiki]

#24351: Block Global Active Adversary Cloudflare
-------------------------------------------------+-------------------------
 Reporter:  nullius                              |          Owner:  tbb-
                                                 |  team
     Type:  enhancement                          |         Status:
                                                 |  reopened
 Priority:  High                                 |      Milestone:
Component:  Applications/Tor Browser             |        Version:
 Severity:  Major                                |     Resolution:
 Keywords:  security, privacy, anonymity, mitm,  |  Actual Points:
  cloudflare                                     |
Parent ID:  #18361                               |         Points:  1000
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by traumschule):

 Awesome! Installed successfully and blocked access to http://bitland.net
 (the only domain in the temporary blocklist).

 Since [https://blog.ungleich.ch/en-us/cms/blog/2018/08/04/mozillas-new-
 dns-resolution-is-dangerous/ Mozilla is with Cloudflare] it's important to
 keep Tor Browser a free haven from trackers and all kinds of corporate
 surveillance. In my view this could be shipped together with #27513 being
 disabled per default with an info on {{{about:tbupdate}}} why this is
 important and how to activate it (loong way to go there).

 However i think the usability should be improved in showing a warning page
 similar to TLS certificates in that one can easily proceed if the site
 contains essentially needed content. Thanks for keeping the focus during
 the ticket war! Cypherpunks write code.

 Note that this is no solution for browsing with w3m ,)

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/24351#comment:92>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online