[tor-bugs] #6098 [Tor Check]: Add a hidden service to	check.torproject.org
    Tor Bug Tracker & Wiki 
    torproject-admin at torproject.org
       
    Thu Jun  7 19:43:03 UTC 2012
    
    
  
#6098: Add a hidden service to check.torproject.org
-----------------------+----------------------------------------------------
 Reporter:  proper     |          Owner:     
     Type:  defect     |         Status:  new
 Priority:  critical   |      Milestone:     
Component:  Tor Check  |        Version:     
 Keywords:             |         Parent:     
   Points:             |   Actualpoints:     
-----------------------+----------------------------------------------------
 TorBrowser gets it's version information from
 https://check.torproject.org/RecommendedTBBVersions and
 https://check.torproject.org/ is TBB's homepage.
 For an adversary, it's granted, that every user of Tor Browser will visit
 that page. It must be too tempting to MITM that site and to spread some
 malicious content.
 The SSL certificate authority system was recently compromised and is
 flawed by design. I suggest making check.torproject.org accessible through
 a hidden service.
-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6098>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
    
    
More information about the tor-bugs
mailing list