[tor-bugs] #10419 [Firefox Patch Issues]: Can requests to 127.0.0.1 be used to fingerprint the browser?

Wed Jan 22 19:52:50 UTC 2014

#10419: Can requests to 127.0.0.1 be used to fingerprint the browser?
--------------------------------------+--------------------------------
     Reporter:  mikeperry             |      Owner:  mikeperry
         Type:  task                  |     Status:  new
     Priority:  major                 |  Milestone:
    Component:  Firefox Patch Issues  |    Version:
   Resolution:                        |   Keywords:  tbb-fingerprinting
Actual Points:                        |  Parent ID:
       Points:                        |
--------------------------------------+--------------------------------

Comment (by oc):

 Let's note that enforcing stricter standards than stock browsers is one of
 the reasons why TBB exists: for example, Linux stock FF will happily XHR
 to LAN (as will Chrome), whereas TBB will not.
 We already have bent the W3C standard and gone further than CORS, for the
 better. Unfortunately, it seems this job is only half-done when you're not
 running FreeBSD…

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10419#comment:12>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online