[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #9623 [Tor Browser]: Referers being sent from hidden service websites

#9623: Referers being sent from hidden service websites
-----------------------------+---------------------------
     Reporter:  cypherpunks  |      Owner:  tbb-team
         Type:  defect       |     Status:  new
     Priority:  major        |  Milestone:
    Component:  Tor Browser  |    Version:
   Resolution:               |   Keywords:  tbb-torbutton
Actual Points:               |  Parent ID:
       Points:               |    Sponsor:
-----------------------------+---------------------------

Comment (by cypherpunks):

 This is being actively exploited in the wild to discover Tor Hidden
 Services by sniffers on or around bad exits. Please ensure that TBB *at
 least* refuses to send referrers over plaintext communications channels
 (eg: port 80).

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9623#comment:14>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs