diff options
| author | Daniel Stenberg <daniel@haxx.se> | 2016-04-08 13:21:52 +0200 |
|---|---|---|
| committer | Daniel Stenberg <daniel@haxx.se> | 2016-04-08 13:21:52 +0200 |
| commit | ca6f0a56ca7b86ae697e156472b9a6cc8a601715 (patch) | |
| tree | cbcc584152ca6596ee4c1fa3d051c562bd12512b /docs | |
| parent | 00cf68c6e866da68a59c856ac9003fb5aed37b09 (diff) | |
KNOWN_BUGS: 11.1 Curl leaks .onion hostnames in DNS
Closes #543
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/KNOWN_BUGS | 14 |
1 files changed, 14 insertions, 0 deletions
diff --git a/docs/KNOWN_BUGS b/docs/KNOWN_BUGS index ec2a6e4e6..6e99ef700 100644 --- a/docs/KNOWN_BUGS +++ b/docs/KNOWN_BUGS @@ -71,6 +71,9 @@ problems may have been fixed or changed somewhat since this was written! 10.3 FTPS over SOCKS 10.4 active FTP over a SOCKS + 11. Internals + 11.1 Curl leaks .onion hostnames in DNS + ============================================================================== 1. HTTP @@ -393,3 +396,14 @@ problems may have been fixed or changed somewhat since this was written! 10.4 active FTP over a SOCKS libcurl doesn't support active FTP over a SOCKS proxy + + +11. Internals + +11.1 Curl leaks .onion hostnames in DNS + + Curl sends DNS requests for hostnames with a .onion TLD. This leaks + information about what the user is attempting to access, and violates this + requirement of RFC7686: https://tools.ietf.org/html/rfc7686 + + Issue: https://github.com/curl/curl/issues/543 |