[tor-bugs] #6182 [Ooni]: Evaluate Herdict
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Sat Jun 16 18:37:17 UTC 2012
#6182: Evaluate Herdict
---------------------+------------------------------------------------------
Reporter: hellais | Owner: hellais
Type: task | Status: new
Priority: normal | Milestone: Sponsor H: June 2012
Component: Ooni | Version:
Keywords: | Parent: #5865
Points: | Actualpoints:
---------------------+------------------------------------------------------
Comment(by hellais):
I started evaluation Herdict here:
https://trac.torproject.org/projects/tor/wiki/doc/OONI/CensorshipDetectionTools/Herdict.
I found a few security issues in it, the biggest is that it does not
enforce encryption on the submission of data from the website, the least
important is that it allows weak cipher and even MD5.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/6182#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list