On Wed, 2011-05-04 at 22:31 +0200, Moritz Bartl wrote:
> Hi,
>
> On 04.05.2011 22:11, Fabio Pietrosanti (naif) wrote:
> > It would be possible to remove X-Forwarded-For from tor2web proxy:
> > * At apache mod_proxy_http level with a code patch:
> > http://blog.basteagow.com/2011/04/02/mod_proxy_http-disable-x-forwarded-headers/
> > Or better do it at polipo level with CensorHeader:
> > http://www.pps.jussieu.fr/~jch/software/polipo/polipo.html#Censoring-headers
>
> I vouch for removal of X-Forwarded-For and a new header for sites to
> detect tor2web users (regardless of IP).
>
You can also detect Tor2Web users through the use of JavaScript:
if ( document.location.host.match(/\.tor2web\.org$/) ) {
alert("mikeperry not detected!!!!!!!!!!!!!!!!!");
}
Attachment:
signature.asc
Description: This is a digitally signed message part
_______________________________________________ tor-talk mailing list tor-talk@xxxxxxxxxxxxxxxxxxxx https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk