[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] Re: #1579 [Tor-Torbutton]: ETag and If-None-Match header can link multiple requests to the same page (was: Tracking users)

#1579: ETag and If-None-Match header can link multiple requests to the same page
---------------------------+------------------------------------------------
 Reporter:  bee            |       Owner:  mikeperry
     Type:  defect         |      Status:  assigned 
 Priority:  blocker        |   Milestone:           
Component:  Tor-Torbutton  |     Version:           
 Keywords:                 |      Parent:           
---------------------------+------------------------------------------------
Changes (by nickm):

  * status:  new => assigned


Comment:

 Okay, so here's the problem:  When a web server attaches an ETag header,
 most browsers will use it in the "If-None-Match" headers for future
 requests for the same URL to avoid downloading the same entity twice.  It
 looks like Torbutton doesn't currently stop this.

 Thanks for the bug report and the demo, bee!!!!!!!!!!!!   And thanks to
 the helpful people on #tor who helped reverse-engineer this deliberately
 unhelpful bug report, particularly vegard.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/1579#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online