[tor-bugs] #15734 [Tor Browser]: ftp pages are not isolated by first party in the cache

["Tor Bug Tracker & Wiki" <blackhole@xxxxxxxxxxxxxx>]

#15734: ftp pages are not isolated by first party in the cache
-----------------------------+--------------------------
 Reporter:  arthuredelstein  |          Owner:  tbb-team
     Type:  defect           |         Status:  new
 Priority:  normal           |      Milestone:
Component:  Tor Browser      |        Version:
 Keywords:  tbb-linkability  |  Actual Points:
Parent ID:                   |         Points:
-----------------------------+--------------------------
 I noticed that if I load
 http://arthuredelstein.github.io/tordemos/ftp-in-iframe.html
 and
 http://arthurtordemos.github.io/tordemos/ftp-in-iframe.html
 in two different tabs.

 Then I can see that the ftp document,
 ftp://ftp.mozilla.org/pub/mozilla.org/
 in about:cache. It says "Fetch count: 2" and "No expiration time."

 The behavior is inconsistent. Sometimes it looks as though there is only
 one network fetch, and sometimes two. Also, the ftp page sometimes
 disappears from the cache after a short while, which makes me think "no
 expiration time" means "expires pretty soon". The quick expiration means
 this is likely not a great linking vector, but I guess it's probably
 better to key ftp page caching by url bar domain.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15734>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs