Re: [tor-dev] Block Global Active Adversary Cloudflare

2018-01-10 Thread nullius
On 2018-01-10 at 23:25:05 +, teor wrote: Sending every remote site address from the Tor process to an extension increases the surface area for attacks. [...] This gives the extension access to the content of every encrypted page. [...] Please develop a

Re: [tor-dev] Block Global Active Adversary Cloudflare

2018-01-10 Thread teor
Hi, On 11 Jan 2018, at 05:38, nullius wrote: >> Here's what I suggest you do: >> >> Blocking an entire CDN would be a major change to either Tor or Tor >> Browser's design. It's not likely to happen, because of the security vs >> usability tradeoff. Significantly reducing

Re: [tor-dev] Block Global Active Adversary Cloudflare

2018-01-10 Thread nullius
I am the reporter of #24351. As thereto, thanks for your thoughts, teor; I will respond accordingly: 2018-01-10 at 00:57:53 +, teor wrote: On 10 Jan 2018, at 10:23, debug wrote: Is there any specific reason why there is no comment from Tor-team

Re: [tor-dev] Block Global Active Adversary Cloudflare

2018-01-09 Thread teor
> On 10 Jan 2018, at 10:23, debug wrote: > > Is there any specific reason why there is no comment from Tor-team for this > issue? > > https://trac.torproject.org/projects/tor/ticket/24351 Many of us have been on holidays. Also, the discussion on the ticket is hard to

[tor-dev] Block Global Active Adversary Cloudflare

2018-01-09 Thread debug
Is there any specific reason why there is no comment from Tor-team for this issue? https://trac.torproject.org/projects/tor/ticket/24351 ___ tor-dev mailing list tor-dev@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-dev