[tor-bugs] #3368 [Website]: Add *.torproject.org to Chrome STS list
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu Jun 9 14:57:18 UTC 2011
#3368: Add *.torproject.org to Chrome STS list
----------------------------+-----------------------------------------------
Reporter: cypherpunks | Owner:
Type: enhancement | Status: reopened
Priority: normal | Milestone:
Component: Website | Version:
Resolution: | Keywords:
Parent: | Points:
Actualpoints: |
----------------------------+-----------------------------------------------
Changes (by phobos):
* status: closed => reopened
* resolution: wontfix =>
Comment:
Having read the draft standard on ietf's site, and now looking through the
chromium sts list. This appears to be nothing more than the equivalent of
our firefox extension https everywhere for chromium. For the vast
majority of users, great, they can get to our https-enabled sites by
default.
If the user has never visited *.torproject.org, doing so over https isn't
going to stop an ssl mitm. Correct?
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3368#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list