[tbb-bugs] #26176 [Applications/Tor Browser]: Display .onion services with "mixed" content in circuit display properly
Tor Bug Tracker & Wiki
blackhole at torproject.org
Wed May 23 07:19:42 UTC 2018
#26176: Display .onion services with "mixed" content in circuit display properly
-------------------------------------+-------------------------------------
Reporter: gk | Owner: tbb-team
Type: defect | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: tbb-torbutton, tbb-
Severity: Normal | circuit-display
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------+-------------------------------------
Assume you have an .onion service (say: https://blockchainbdgpzk.onion/)
that includes clear-text resources (e.g. an ad iframe like https://bci-
ads.blockchain.info/bci-ads/iframe).
What should the circuit display show as the circuit for this site?
Clearly, the requests for the .onion service (and respective resources)
and the the requests semming from the iframe can't go over the same
circuit. Thus, there is no way the circuit display can show only one
circuit for loading all of the website (as it ideally would).
What is happening right now: the circuit display first shows the .onion
circuit. But then when the clearnet requests are issued, the code we have
just replaces the first three hops of the .onion circuit with the nodes
used for the clearnet resources retaining the other three hops in the
display which gives the impression everything is sent over an .onion
circuit.
It seems to me this is suboptimal. Better would be not to update the
circuit display with the information from the clearnet circuit. But there
might be an even better solution we want to deploy
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26176>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tbb-bugs
mailing list