#10703: Fallback charset enables fingerprinting of bundle localization -------------------------------------------------+------------------------- Reporter: dcf | Owner: | mikeperry Type: defect | Status: closed Priority: Medium | Milestone: Component: TorBrowserButton | Version: Severity: Normal | Resolution: fixed Keywords: tbb-fingerprinting, tbb-pref, | Actual Points: MikePerry201402R | Parent ID: | Points: Reviewer: | Sponsor: -------------------------------------------------+------------------------- Changes (by dcf):
* status: reopened => closed * resolution: => fixed Comment: Replying to [comment:18 xfix]: > The bug appears to still exist, and can be checked on https://hsivonen.com/test/moz/check-charset.htm Thanks for this. I've checked it out, and it appears to be a separate issue from this ticket. So I've re-closed this ticket and opened a new one: #20025. Strangely, I can only reproduce #20025 on an HTTPS server with HSTS. I tested several variations, including Content-Encoding, and HSTS is the only factor that seemed to make it work. The hsivonen.com server has HSTS. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/10703#comment:19> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs