[tor-bugs] #6098 [Tor Check]: Add a hidden service to check.torproject.org
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Thu Jun 7 19:43:03 UTC 2012
#6098: Add a hidden service to check.torproject.org
-----------------------+----------------------------------------------------
Reporter: proper | Owner:
Type: defect | Status: new
Priority: critical | Milestone:
Component: Tor Check | Version:
Keywords: | Parent:
Points: | Actualpoints:
-----------------------+----------------------------------------------------
TorBrowser gets it's version information from
https://check.torproject.org/RecommendedTBBVersions and
https://check.torproject.org/ is TBB's homepage.
For an adversary, it's granted, that every user of Tor Browser will visit
that page. It must be too tempting to MITM that site and to spread some
malicious content.
The SSL certificate authority system was recently compromised and is
flawed by design. I suggest making check.torproject.org accessible through
a hidden service.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6098>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list