[tor-bugs] #26764 [Applications/Orbot]: HTTP proxy bug in Orbot 16.0.2-RC-1

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Mar 8 13:29:54 UTC 2019


#26764: HTTP proxy bug in Orbot 16.0.2-RC-1
--------------------------------+--------------------------
 Reporter:  soren@…             |          Owner:  n8fr8
     Type:  defect              |         Status:  assigned
 Priority:  Medium              |      Milestone:
Component:  Applications/Orbot  |        Version:
 Severity:  Normal              |     Resolution:
 Keywords:                      |  Actual Points:
Parent ID:  #24215              |         Points:
 Reviewer:                      |        Sponsor:
--------------------------------+--------------------------
Changes (by eighthave):

 * cc: hans@… (added)
 * parent:   => #24215


Comment:

 The problem is because tor's built-in HTTP proxy is only a HTTP CONNECT
 tunnel.  polipo provides a full HTTP proxy.  When using an HTTP proxy with
 HTTPS traffic, lots of frameworks will automatically switch to HTTP
 CONNECT mode to tunnel the HTTPS traffic over HTTP.  The solution here is
 to find a way to force all connections using the HTTP proxy to switch to
 HTTP CONNECT mode.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26764#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list