[tor-bugs] #2098 [Website]: Tor Trac sets cookies over HTTPS that can be sent over cleartext HTTP

Tor Bug Tracker & Wiki torproject-admin at torproject.org
Sun Oct 24 12:19:51 UTC 2010


#2098: Tor Trac sets cookies over HTTPS that can be sent over cleartext HTTP
---------------------+------------------------------------------------------
 Reporter:  rransom  |       Owner:  erinn   
     Type:  defect   |      Status:  assigned
 Priority:  major    |   Milestone:          
Component:  Website  |     Version:          
 Keywords:           |      Parent:          
---------------------+------------------------------------------------------
Changes (by phobos):

  * status:  new => assigned
  * owner:  phobos => erinn


Comment:

 I think this is going to involve patching trac and maintaining a custom
 trac installation.  Perhaps we should get the patch into the real trac
 codebase.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/2098#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tor-bugs mailing list