On Mon, Oct 01, 2012 at 07:18:00AM +0200, intrigeri wrote: > > Since you are also using curl and only download the header, does > > faking the Tor Button user agent provide any additional benefit? > > Couldn't the server quite easily distinguish from real Tor Button > > users and tails_htp curl users? > > It may be worse than what you are suggesting. > > If iceweasel + Torbutton rarely, if ever, sends HTTP HEAD requests, > then we should probably not pretend to be Torbutton. Does it?
I think the overhead of not using '--head' and doing a full GET would be marginal. It would make it at least a little bit harder to distinguish from other requests. -- Ague
pgp9rOIWyQjYl.pgp
Description: PGP signature
_______________________________________________ tails-dev mailing list [email protected] https://mailman.boum.org/listinfo/tails-dev
