[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #3429 [TorBrowserButton]: Referer blocking option breaks browser navigation

#3429: Referer blocking option breaks browser navigation
----------------------------------------+-----------------------------------
 Reporter:  Anna                        |          Owner:  mikeperry                    
     Type:  defect                      |         Status:  new                          
 Priority:  major                       |      Milestone:  TorBrowserBundle 2.2.x-stable
Component:  TorBrowserButton            |        Version:                               
 Keywords:  MikePerryIteration20110828  |         Parent:                               
   Points:  3                           |   Actualpoints:                               
----------------------------------------+-----------------------------------

Comment(by mikeperry):

 The good news is we can fix this. The bad news is that it makes the toggle
 model even less safe if we do so, because of Firefox API limitations.
 Basically the fix would increase the probability that some requests might
 leak through from one torbutton state to another.

 I am kind of torn. On the one hand, since we're don't really support the
 toggle model, it might be fine to make it (more) insecure. However, I
 don't really think the referrer blocking feature is very useful, and I am
 planning on removing it in the next major release.. So to break it for
 this reason seems kind of silly.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3429#comment:7>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs