[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

[tor-bugs] #13093 [EFF-HTTPS Everywhere]: MiTM in the wild: Merge localbitcoins.com rule from master:

#13093: MiTM in the wild: Merge localbitcoins.com rule from master:
----------------------------------+----------------------------------
 Reporter:  cypherpunks           |          Owner:  zyan
     Type:  enhancement           |         Status:  new
 Priority:  major                 |      Milestone:  HTTPS-E 4 stable
Component:  EFF-HTTPS Everywhere  |        Version:
 Keywords:  httpse-ruleset-bug    |  Actual Points:
Parent ID:                        |         Points:
----------------------------------+----------------------------------
 Can you please merge Localbitcoins.com.xml from master into a stable
 release?

 - It's a straightforward rule from March 2013
 - The site uses Strict-Transport-Security
 - Yesterday, I witnessed a self-signed MiTM attempt against the site. It's
 likely that exit nodes are running sslstrip too

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/13093>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs