nihilist/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-11-10 21:23:58 +01:00
Code Issues Packages Projects Releases Wiki Activity

Added Automatic Firefox Notification extension to the verify-tor-usage proposal (thanks Mike Perry)

Browse Source 
svn:r14128
This commit is contained in:
Steven Murdoch 2008-03-19 10:49:33 +00:00
parent ec1e66ac51
commit 739e3567d8
1 changed files with 32 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

35
doc/spec/proposals/131-verify-tor-usage.txt
View File

@ -68,7 +68,7 @@ Extensions:
configuration could include the following HTML: configuration could include the following HTML:
<h2>Connection chain</h2> <h2>Connection chain</h2>
<ul> <ul>
<li>Tor 0.1.2.14-alpha <li>Tor 0.1.2.14-alpha</li>
<!-- Tor Connectivity Check: success --> <!-- Tor Connectivity Check: success -->
</ul> </ul>
@ -78,8 +78,8 @@ Extensions:
browser: browser:
<h2>Connection chain <h2>Connection chain
<ul> <ul>
<li>Tor 0.1.2.14-alpha <li>Tor 0.1.2.14-alpha</li>
<li>Polipo version 1.0.4 <li>Polipo version 1.0.4</li>
<!-- Tor Connectivity Check: success --> <!-- Tor Connectivity Check: success -->
</ul> </ul>
@ -92,6 +92,35 @@ Extensions:
loaded then the user will know that external connectivity through loaded then the user will know that external connectivity through
Tor works. Tor works.
Automatic Firefox Notification:
All forms of the website should return valid XHTML and have a
hidden link with an id attribute "TorCheckResult" and a target
property that can be queried to determine the result. For example,
a hidden link would convey success like this:
<a id="TorCheckResult" target="success" href="/"></a>
failure like this:
<a id="TorCheckResult" target="failure" href="/"></a>
and DNS leaks like this:
<a id="TorCheckResult" target="dnsleak" href="/"></a>
Firefox extensions such as Torbutton would then be able to
issue an XMLHttpRequest for the page and query the result
with resultXML.getElementById("TorCheckResult").target
to automatically report the Tor status to the user when
they first attempt to enable Tor activity, or whenever
they request a check from the extension preferences window.
If the check website is to be themed with heavy graphics and/or
extensive documentation, the check result itself should be
contained in a seperate lightweight iframe that extensions can
request via an alternate url.
Security and resiliency implications: Security and resiliency implications:
What attacks are possible? What attacks are possible?