[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #8666 [EFF-HTTPS Everywhere]: Disable Hellebaard because of mismatching with MJOPR



#8666: Disable Hellebaard because of mismatching with MJOPR
----------------------------------+-----------------------------------------
 Reporter:  pander                |          Owner:  pde          
     Type:  defect                |         Status:  new          
 Priority:  normal                |      Milestone:               
Component:  EFF-HTTPS Everywhere  |        Version:  HTTPS-E 3.1.4
 Keywords:                        |         Parent:               
   Points:                        |   Actualpoints:               
----------------------------------+-----------------------------------------
 Please disable HTTPS Everywhere for hellebaard.nl and *.hellebaard.nl.

 The domainname has the same IP address as mjopr.nl which has an HTTPS
 running but these two sites have absolutely nothing in common.

 Going to (http://)hellebaard.nl in your browser will redirect you to
 (https://)mjopr.nl.

 (Eventually one will arrive at http://mjopr.nl (non-secure) because of
 configuration of mjopr.nl. This has noting to do with HTTPS Everywhere but
 I should notice it when you test it.)

 If I go to hellebaard.nl and get forwarded to mjopr.nl, this will only
 happen the first time. When I re-enter hellebaard.nl, I will stay there.

 In order to prevent confusion and mismatching and having customers
 arriving at the wrong site, please add a mismatch rule for Hellebaard so
 that all going to hellebaard.nl and *.hellebaard.nl stay at Hellebaard
 (and not go to MJOPR).

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8666>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs