[tor-bugs] #9713 [EFF-HTTPS Everywhere]: Users report HTTPS Everywhere 0.development.11 in some sort of clients1.google.com loop?

[Tor Bug Tracker & Wiki]

#9713: Users report HTTPS Everywhere 0.development.11 in some sort of
clients1.google.com loop?
--------------------------------------+-----------------
     Reporter:  erinn                 |      Owner:  pde
         Type:  defect                |     Status:  new
     Priority:  normal                |  Milestone:
    Component:  EFF-HTTPS Everywhere  |    Version:
   Resolution:                        |   Keywords:
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+-----------------

Comment (by cypherpunks):

 I have tried the following.

 Ubuntu 10.04.4 and64:  TBB 2.4.17-beta-1 32-bit and 64-bit
 Ubuntu 12.04.3 amd64:  TBB 2.4.17-beta-1 32-bit and 64-bit
 Ubuntu 13.04 i386: TBB 2.4.17-beta-1 32-bit

 In all cases I trigger the fault simply by trying to visit
 https://www.google.com/.

 The problem appears to occur during the OCSP.  Tor Browser submits a HTTP
 POST for http://clients1.google.com/ocsp.  This is some how failing.  TBB
 should then move up the certificate hierarchy to POST http://gtglobal-
 ocsp.geotrust.com/.  This doesn’t happen.  TBB repeatedly attempts to
 access clients1.google.com.  This happens even after a New Identity.  The
 only way I could stop it was to toggle Work Offline, to work offline then
 back online.

 Disabling the HTTPS Everywhere ruleset "Google Services" stops this from
 happening.  This ruleset looks particularly complicated, and I don't fancy
 wading my way through it.  But, I'm going to have a look...

 As I find it so easy to trigger and completely consistent, I find it weird
 that only some people are seeing this.  As you can probably tell from
 above, I'm an Ubuntu person.  I'm tempted to see if it occurs with other
 Linux distributions on my hardware.  Is it a race condition?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/9713#comment:2>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online