[tbb-bugs] #30599 [Applications/Tor Browser]: Cloudflare alt-svc onions cause a different exit to be used at each request

Tor Bug Tracker & Wiki blackhole at torproject.org
Thu Jan 16 01:35:54 UTC 2020


#30599: Cloudflare alt-svc onions cause a different exit to be used at each request
--------------------------------------+--------------------------------
 Reporter:  cypherpunks2              |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  High                      |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ux-team                   |  Actual Points:
Parent ID:  #30024                    |         Points:
 Reviewer:                            |        Sponsor:  Sponsor27-must
--------------------------------------+--------------------------------

Comment (by sysrqb):

 Replying to [comment:7 gk]:
 > But now you get another set of those .onions as hosts in response
 headers. If they are not seen before the first (while validation is
 ongoing validation of other alt-svc hosts in headers seems to be skipped)
 gets validated again, causing another set of HS related circuits created
 and thus the circuit display is updated again. And so on with further
 posts.

 See ticket:27502#comment:15

 It seems gk already noticed this, too - but I think there is another bug
 hidden in there, too. I haven't found it yet, though.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/30599#comment:9>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list