1. 17 Mar, 2021 1 commit
    • Richard Pospesel's avatar
      Bug 23247: Communicating security expectations for .onion · 3b0641f3
      Richard Pospesel authored and Matthew Finkel's avatar Matthew Finkel committed
      Encrypting pages hosted on Onion Services with SSL/TLS is redundant
      (in terms of hiding content) as all traffic within the Tor network is
      already fully encrypted.  Therefore, serving HTTP pages from an Onion
      Service is more or less fine.
      Prior to this patch, Tor Browser would mostly treat pages delivered
      via Onion Services as well as pages delivered in the ordinary fashion
      over the internet in the same way.  This created some inconsistencies
      in behaviour and misinformation presented to the user relating to the
      security of pages delivered via Onion Services:
       - HTTP Onion Service pages did not have any 'lock' icon indicating
         the site was secure
       - HTTP Onion Service pages would be marked as unencrypted in the Page
         Info screen
       - Mixed-mode content restrictions did not apply to HTTP Onion Service
         pages embedding Non-Onion HTTP content
      This patch fixes the above issues, and also adds several new 'Onion'
      icons to the mix to indicate all of the various permutations of Onion
      Services hosted HTTP or HTTPS pages with HTTP or HTTPS content.
      Strings for Onion Service Page Info page are pulled from Torbutton's
      localization strings.
  2. 28 May, 2020 1 commit
  3. 27 May, 2020 5 commits
  4. 26 May, 2020 3 commits
  5. 13 May, 2020 1 commit
    • Narcis Beleuzu's avatar
      Backed out 9 changesets (bug 1637487) for bustages on nsMixedContentBlocker.cpp . CLOSED TREE · 53167b28
      Narcis Beleuzu authored
      Backed out changeset 5633cc2aaa9b (bug 1637487)
      Backed out changeset c4f0c757cae0 (bug 1637487)
      Backed out changeset 65bb1114df87 (bug 1637487)
      Backed out changeset 1a64ef10e773 (bug 1637487)
      Backed out changeset d1709ebb7f46 (bug 1637487)
      Backed out changeset 286e5ee6517f (bug 1637487)
      Backed out changeset 83362625c297 (bug 1637487)
      Backed out changeset ab9df2f2d11f (bug 1637487)
      Backed out changeset b83f49bc11b0 (bug 1637487)
  6. 14 May, 2020 9 commits
  7. 13 May, 2020 10 commits
  8. 12 May, 2020 1 commit
  9. 11 May, 2020 1 commit
  10. 08 May, 2020 4 commits
  11. 07 May, 2020 2 commits
  12. 06 May, 2020 2 commits