[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #7540 [EFF-HTTPS Everywhere]: Breaks certain links and forms at SnapNames

#7540: Breaks certain links and forms at SnapNames
-------------------------------------+--------------------------------------
    Reporter:  subsection1t          |       Owner:  pde   
        Type:  defect                |      Status:  closed
    Priority:  normal                |   Milestone:        
   Component:  EFF-HTTPS Everywhere  |     Version:        
  Resolution:  fixed                 |    Keywords:        
      Parent:                        |      Points:        
Actualpoints:                        |  
-------------------------------------+--------------------------------------
Changes (by pde):

 * cc: MB, admin@â (added)
  * status:  new => closed
  * resolution:  => fixed


Comment:

 I think this is a securecookie bug.  Which is weird, because
 moniker.snapnames.com is being successfully rewritten from HTTP to HTTPS.
 This is probably evidence of a security vulernability in the snapnames
 site.

 Anyway, we're going to disable the securecookie directives in the next
 release of HTTPS Everywhere.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/7540#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs