Skip to content

GitLab

  • Menu
Projects Groups Snippets
    • Loading...
  • Help
    • Help
    • Support
    • Community forum
    • Submit feedback
    • Contribute to GitLab
  • Sign in
  • Trac Trac
  • Project information
    • Project information
    • Activity
    • Labels
    • Members
  • Issues 246
    • Issues 246
    • List
    • Boards
    • Service Desk
    • Milestones
  • Monitor
    • Monitor
    • Metrics
    • Incidents
  • Analytics
    • Analytics
    • Value stream
  • Wiki
    • Wiki
  • Activity
  • Create a new issue
  • Issue Boards
Collapse sidebar
  • Legacy
  • TracTrac
  • Issues
  • #9713

Closed (moved)
(moved)
Open
Created Sep 10, 2013 by Erinn Clark@erinn

HTTPS Everywhere 4.0development.11 causes google.com OCSP meltdown

On our blog we have several users complaining that they are sending non-stop connection requests to clients1.google.com and they say that downgrading their version of HTTPS Everywhere alleviates the problem.

The same problem: at times, perhaps after some inactivity delay, there appear some non-stop connection requests to clients1.google.com:443. Why??? I have no business connecting to Google. Look for yourself - monitor the circuits/connections in the Vidalia's Network Map... If the requests are seen, they stop only after Tor Browser is closed.

(This one is interesting because the user implies there are no deliberate connections to Google being made.)

with the dev version of https everywhere in the latest tor build I get (like the poster above) constant connections to clients1.google.com, after downgrading https everywhere to the stable version these connections don't show up.

One user says that he or she can reliably reproduce it by visiting gmail. Just the front page is enough to trigger it, but logging in is even worse.

Another user says:

the earlier reported non-stop outgoing https connections to clients1.google.com seemed to happen with the latest TBB x64 on Linux, but only after the browser Add-ons were updated manually - that loaded the latest dev version of Https-Everywhere. After I manually replaced it with the previous "4.0development.9" version that was on hand, the weird connections are no more.

For my part, I have been unable to reproduce this bug on Linux, even when logging into (and interacting with) gmail. I haven't tried manually updating any of the extensions yet.

https://blog.torproject.org/blog/new-tor-02417-rc-packages

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information
Assignee
Assign to
Time tracking