Opened 7 years ago

Last modified 2 years ago

#8890 new defect

Observatory submissions don't use browser's SOCKS proxy settings

Reported by: schoen Owned by: pde
Priority: Medium Milestone:
Component: HTTPS Everywhere/EFF-HTTPS Everywhere Version:
Severity: Normal Keywords:
Cc: g.koppen@… Actual Points:
Parent ID: Points:
Reviewer: Sponsor:


When I set a SOCKS proxy for my browser to browse over an SSH tunnel, I found that HTTPS Everywhere was still trying to make direct (non-proxied) connections to to submit its certificate observations. This is potentially bad from a privacy point of view and might also cause the observations to be easier for a network adversary to block, because it's very clear where they're headed.

The Observatory submissions should probably respect the browser's proxy settings.

Child Tickets

#9306closedpdeSubmissions spams used ports (only SYN)HTTPS Everywhere/EFF-HTTPS Everywhere

Change History (2)

comment:1 Changed 7 years ago by gk

Cc: g.koppen@… added

comment:2 Changed 2 years ago by teor

Severity: Normal

Set all open tickets without a severity to "Normal"

Note: See TracTickets for help on using tickets.