Re: [tor-bugs] #3368 [Website]: Add *.torproject.org to Chrome STS list

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#3368: Add *.torproject.org to Chrome STS list
----------------------------+-----------------------------------------------
    Reporter:  cypherpunks  |       Owner:          
        Type:  enhancement  |      Status:  reopened
    Priority:  normal       |   Milestone:          
   Component:  Website      |     Version:          
  Resolution:               |    Keywords:          
      Parent:               |      Points:          
Actualpoints:               |  
----------------------------+-----------------------------------------------
Changes (by phobos):

  * status:  closed => reopened
  * resolution:  wontfix =>


Comment:

 Having read the draft standard on ietf's site, and now looking through the
 chromium sts list.  This appears to be nothing more than the equivalent of
 our firefox extension https everywhere for chromium.  For the vast
 majority of users, great, they can get to our https-enabled sites by
 default.

 If the user has never visited *.torproject.org, doing so over https isn't
 going to stop an ssl mitm.  Correct?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3368#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs