[HTTPS-E Rulesets] Mail.ru (partial) login bug

Peter Eckersley pde at eff.org
Thu Dec 6 10:23:12 PST 2012


I suspect this might be a problem with the very broad <securecookie> attribute
in the ruleset.  However I haven't been able to make a mail.ru account to test
this (perhaps I'm doing something wrong with the CAPTCHAs in Cyrillic...)

On Thu, Dec 06, 2012 at 09:07:09AM +0400, Aleksey Kosterin wrote:
> Yes, this bug is also present in 4.0development.3.
> After log in, go to home page mail.ru and you will not be logged in.
> 
> 
> 2012/12/6 Peter Eckersley <pde at eff.org>
> 
> > Hi Aleksey,
> >
> > Can you tell us if this bug is also present in 4.0development.3?
> >
> > On Sun, Dec 02, 2012 at 08:29:49PM +0400, Aleksey Kosterin wrote:
> > > Login on Mail.ru don't works when HTTPS Everwhere 3.0.4 enabled.
> >
> > --
> > Peter Eckersley                            pde at eff.org
> > Technology Projects Director      Tel  +1 415 436 9333 x131
> > Electronic Frontier Foundation    Fax  +1 415 436 9993
> >

-- 
Peter Eckersley                            pde at eff.org
Technology Projects Director      Tel  +1 415 436 9333 x131
Electronic Frontier Foundation    Fax  +1 415 436 9993




More information about the HTTPS-Everywhere-Rules mailing list