[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Torbutton 1.3.0-alpha: Community Edition!



----- Original Message ----

> From: Mike Perry <mikeperry@xxxxxxxxxx>
> To: or-talk@xxxxxxxxxxxxx
> Sent: Sun, October 3, 2010 10:46:29 PM
> Subject: Re: Torbutton 1.3.0-alpha: Community Edition!
> 
> 
> Heh, it turns out this has the same problem, at least with  Pidgin.
> torhttp://link.com still creates an http hyperlink that when  clicked
> on directly would be loaded outside of Tor.
> 
> httptor://link.com  does not create a hyperlink, though.. Nor  does
> http+tor://link.com.

Worse, it does so in the default browser. Even if you have Tor running in 
Firefox, your request may be sent through a new instance of IE without Tor.

Instead of using a protocol to tell Torbutton to ensure routing through Tor, 
have you considered using the .onion TLD for that purpose? That would also help 
guard against accidentally revealing which hidden service you are looking for if 
you try to hit it when Tor isn't running. The links could look like 
http://www.google.com.onion/ or https://www.google.com.onion



      

***********************************************************************
To unsubscribe, send an e-mail to majordomo@xxxxxxxxxxxxxx with
unsubscribe or-talk    in the body. http://archives.seul.org/or/talk/