#22305: Don't send accept-encoding on anon requests ------------------------------+-------------------------------- Reporter: nickm | Owner: Type: defect | Status: new Priority: High | Milestone: Tor: 0.3.1.x-final Component: Core Tor/Tor | Version: Severity: Normal | Keywords: Actual Points: | Parent ID: Points: | Reviewer: Sponsor: | ------------------------------+-------------------------------- On an anonymized request, we shouldn't send an accept-encoding header.
Further, if we get an lzma-encrypted or zstd-encrypted thing over an anonymized connection, we shouldn't decompress it, since that would also reveal whether we have lzma/zstd support. -- Ticket URL: <https://trac.torproject.org/projects/tor/ticket/22305> Tor Bug Tracker & Wiki <https://trac.torproject.org/> The Tor Project: anonymity online _______________________________________________ tor-bugs mailing list tor-bugs@lists.torproject.org https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs