[tor-bugs] #8890 [EFF-HTTPS Everywhere]: Observatory submissions don't use browser's SOCKS proxy settings
Tor Bug Tracker & Wiki
blackhole at torproject.org
Thu May 16 21:48:25 UTC 2013
#8890: Observatory submissions don't use browser's SOCKS proxy settings
----------------------------------+-----------------------------------------
Reporter: schoen | Owner: pde
Type: defect | Status: new
Priority: normal | Milestone:
Component: EFF-HTTPS Everywhere | Version:
Keywords: | Parent:
Points: | Actualpoints:
----------------------------------+-----------------------------------------
When I set a SOCKS proxy for my browser to browse over an SSH tunnel, I
found that HTTPS Everywhere was still trying to make direct (non-proxied)
connections to observatory6.eff.org to submit its certificate
observations. This is potentially bad from a privacy point of view and
might also cause the observations to be easier for a network adversary to
block, because it's very clear where they're headed.
The Observatory submissions should probably respect the browser's proxy
settings.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/8890>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list