[tor-dev] Proposal: HTTP header distinguish TBB users

[Tim Wilson-Brown - teor]

> On 3 Oct 2015, at 14:10, Virgil Griffith <i at virgil.gr> wrote:
> 
> (2) If we (Tor Project) is going to ask MaxMind to do something special to distinguish TBB users, it seems reasonable we should make the same effort.  I know in the past it's been proposed for TBB to include a special HTTP header, e.g.,
> 
> Tor-Browser-Bundle: true
> 
> to distinguish TBB users.  If this header existed, I could detect it at the CDN-level and do the appropriate redirect.  Alternatively, We could do something equivalent with the "Via": HTTP header, but that seems overkill.
> 
> Between these two options, I personally opt for (2) because it seems inappropriate to request MaxMind to help us do X when we have not done what we can do to achieve X.
> 
> Q: Does anyone (especially Mike Perry) have any objections to (2)?  If not, I will write the proposal.

I think this kind of tagging has security implications, but I’m not sure what the tradeoffs are.

Are we still trying to hide TBB users in the Mozilla browser crowd?
Are we making it even easier to identify and block TBB users?

Tim

Tim Wilson-Brown (teor)

teor2345 at gmail dot com
PGP 968F094B

teor at blah dot im
OTR CAD08081 9755866D 89E2A06F E3558B7F B5A9D14F

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20151003/6203b6a9/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 873 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.torproject.org/pipermail/tor-dev/attachments/20151003/6203b6a9/attachment.sig>