[tor-bugs] #30599 [Applications/Tor Browser]: Cloudflare alt-svc onions cause a different exit to be used at each request

Mon May 27 01:14:55 UTC 2019

#30599: Cloudflare alt-svc onions cause a different exit to be used at each request
--------------------------------------+-------------------------------
 Reporter:  cypherpunks2              |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:  #30024                    |         Points:
 Reviewer:                            |        Sponsor:  Sponsor27-can
--------------------------------------+-------------------------------

Comment (by cypherpunks):

 Replying to [comment:3 teor]:
 > So this is a request for Tor Browser to prioritise "the same onion you
 used last time"?
 > This could get interesting: we don't want to leak preferred onions
 between URL bar domains.

 In the same way that the same exit is preferred for a given domain.

 Building a new circuit for each and every request as is currently done in
 this situation is a waste of resources and a fingerprinting risk. There's
 no reason that one refresh uses one circuit and the next refresh 6 seconds
 later gives another.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30599#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online