[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: [tor-bugs] #2413 [EFF-HTTPS Everywhere]: HTTPS Everywhere for Chrome

#2413: HTTPS Everywhere for Chrome
----------------------------------+-----------------------------------------
 Reporter:  aaronsw               |       Owner:  pde
     Type:  enhancement           |      Status:  new
 Priority:  normal                |   Milestone:     
Component:  EFF-HTTPS Everywhere  |     Version:     
 Keywords:                        |      Parent:     
----------------------------------+-----------------------------------------

Comment(by aaronsw):

 Another feature could be to ensure all cookies are SSL-only where possible
 (I assume there's API support for that). This combined with the quick
 redirect could protect against wo0dh3ad-style attacks. Any time you
 followed a non-SSL link no cookies would be sent and any time you saw a
 form it'd have to be on an SSL page, since you'd be redirected.

 Also, I presume if this is developed much of the code and infrastructure
 can be reused for a Safari version.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2413#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs