[tbb-bugs] #26176 [Applications/Tor Browser]: Display .onion services with "mixed" content in circuit display properly

Tor Bug Tracker & Wiki blackhole at torproject.org
Wed May 23 07:19:42 UTC 2018


#26176: Display .onion services with "mixed" content in circuit display properly
-------------------------------------+-------------------------------------
     Reporter:  gk                   |      Owner:  tbb-team
         Type:  defect               |     Status:  new
     Priority:  Medium               |  Milestone:
    Component:  Applications/Tor     |    Version:
  Browser                            |   Keywords:  tbb-torbutton, tbb-
     Severity:  Normal               |  circuit-display
Actual Points:                       |  Parent ID:
       Points:                       |   Reviewer:
      Sponsor:                       |
-------------------------------------+-------------------------------------
 Assume you have an .onion service (say: https://blockchainbdgpzk.onion/)
 that includes clear-text resources (e.g. an ad iframe like https://bci-
 ads.blockchain.info/bci-ads/iframe).

 What should the circuit display show as the circuit for this site?
 Clearly, the requests for the .onion service (and respective resources)
 and the the requests semming from the iframe can't go over the same
 circuit. Thus, there is no way the circuit display can show only one
 circuit for loading all of the website (as it ideally would).

 What is happening right now: the circuit display first shows the .onion
 circuit. But then when the clearnet requests are issued, the code we have
 just replaces the first three hops of the .onion circuit with the nodes
 used for the clearnet resources retaining the other three hops in the
 display which gives the impression everything is sent over an .onion
 circuit.

 It seems to me this is suboptimal. Better would be not to update the
 circuit display with the information from the clearnet circuit. But there
 might be an even better solution we want to deploy

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/26176>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list