[tor-bugs] #3368 [Website]: Add *.torproject.org to Chrome STS list
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu Jun 9 14:34:07 UTC 2011
#3368: Add *.torproject.org to Chrome STS list
----------------------------+-----------------------------------------------
Reporter: cypherpunks | Owner:
Type: enhancement | Status: closed
Priority: normal | Milestone:
Component: Website | Version:
Resolution: wontfix | Keywords:
Parent: | Points:
Actualpoints: |
----------------------------+-----------------------------------------------
Changes (by tagnaq):
* cc: tagnaq@… (added)
Comment:
AFAIK Chrome honors STS headers. Shipping a list with a browser protects
also user who access a certain website for the first time. Users without
such a list remain vulnerable against active MITM attackers.
I would see the use of the list within chrome similar to the list in the
HTTPSEverywhere firefox addon. (where the torproject seams to be included)
btw: https://deb.torproject.org redirects to the main page (www)
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3368#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list