Re: [Tails-dev] Faking htpdate user agent worth it?

Supprimer ce message

Répondre à ce message
Auteur: Ague Mill
Date:  
À: The Tails public development discussion list
Sujet: Re: [Tails-dev] Faking htpdate user agent worth it?
On Mon, Oct 01, 2012 at 07:18:00AM +0200, intrigeri wrote:
> > Since you are also using curl and only download the header, does
> > faking the Tor Button user agent provide any additional benefit?
> > Couldn't the server quite easily distinguish from real Tor Button
> > users and tails_htp curl users?
>
> It may be worse than what you are suggesting.
>
> If iceweasel + Torbutton rarely, if ever, sends HTTP HEAD requests,
> then we should probably not pretend to be Torbutton. Does it?


I think the overhead of not using '--head' and doing a full GET would be
marginal. It would make it at least a little bit harder to distinguish
from other requests.

--
Ague