#27949 closed defect (duplicate)

Wrong circuit & padlock displayed when using an onion service through Alt-Svc discovery

Reported by: nicoo Owned by: tbb-team
Priority: Medium Milestone:
Component: Applications/Tor Browser Version:
Severity: Normal Keywords:
Cc: Actual Points:
Parent ID: Points:
Reviewer: Sponsor:

Description

TBB version 8.5a2, Linux/amd64

When connecting to a website that offers an onion service through the Alt-Svc header, the circuit (and padlock icon) aren't updated when the browser reconnects through the onion service.

I confirmed the bug occurs by connecting to an endpoint, on an Alt-Svc-enabled service, that returns “tor” when going over an exit node and “onion” when going over the onion service:

https://www.facebook.com/si/proxy

(This is a facebook-internal endpoint, and I will replace the suggested reproduction endpoint once I setup an Alt-Svc-enabled website and reproduce the issue on it.)

Child Tickets

Attachments (1)

tbb-alt-svc-bug.png (96.1 KB) - added by nicoo 13 months ago.
Screenshot exposing the issue

Download all attachments as: .zip

Change History (3)

Changed 13 months ago by nicoo

Attachment: tbb-alt-svc-bug.png added

Screenshot exposing the issue

comment:1 Changed 13 months ago by Unicode

Hrm, clean TBB 8.0.2 uses .onion for the second reload only (and until the circuit switched?) but:

Alternate Service Mapping found: https://www.facebook.com:-1 to https://facebook2bsjxbp3m2pquxlu5gwcv735z6u3pfgjtkbg7evijlyshsqd.onion:443
Alternate Service Mapping found: https://www.facebook.com:-1 to https://facebook2futmrduts5uqn3ahwg4qyqoks6h3alxf5drhsgyhzujyqad.onion:443
Tor NOTICE: Closed 1 streams for service [scrubbed].onion for reason resolve failed. Fetch status: No more HSDir available to query. 
Tor NOTICE: Closed 1 streams for service [scrubbed].onion for reason resolve failed. Fetch status: No more HSDir available to query. 

comment:2 Changed 13 months ago by gk

Resolution: duplicate
Status: newclosed

I am not convince yet we should update the padlock icon as it is weird to show an onion for a non-onion URL (and, no, Alt-Svc is not changing anything in the URL bar). For the circuit we have #27590. Marking this as a duplicate.

Note: See TracTickets for help on using tickets.