Re: [tor-bugs] #3368 [Website]: Add *.torproject.org to Chrome STS list

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#3368: Add *.torproject.org to Chrome STS list
----------------------------+-----------------------------------------------
    Reporter:  cypherpunks  |       Owner:        
        Type:  enhancement  |      Status:  closed
    Priority:  normal       |   Milestone:        
   Component:  Website      |     Version:        
  Resolution:  wontfix      |    Keywords:        
      Parent:               |      Points:        
Actualpoints:               |  
----------------------------+-----------------------------------------------
Changes (by tagnaq):

 * cc: tagnaq@â (added)


Comment:

 AFAIK Chrome honors STS headers. Shipping a list with a browser protects
 also user who access a certain website for the first time. Users without
 such a list remain vulnerable against active MITM attackers.

 I would see the use of the list within chrome similar to the list in the
 HTTPSEverywhere firefox addon. (where the torproject seams to be included)

 btw: https://deb.torproject.org  redirects to the main page (www)

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3368#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs