id summary keywords status owner type priority 615 Can JavaScript loaded from Tahoe access all your content which is loaded from Tahoe? newcaps confidentiality integrity preservation capleak gsoc websec assigned davidsarah defect critical 2222 make a FAQ describing the impact of heartbleed on Tahoe-LAFS security integrity confidentiality pyopenssl heartbleed docs assigned blaisep defect critical 127 Cap URLs leaked via HTTP Referer header confidentiality integrity preservation capleak research websec assigned davidsarah defect major 406 end-to-end encoding self-test test pycryptopp integrity assigned zooko defect major 413 mutable files: expose version info to HTTP clients mutable integrity versioning webapi wui new enhancement major 453 safely add plaintext_hash to immutable UEB integrity newcaps performance new enhancement major 492 mutable files: add ciphertext hash tree to signature block newcaps security integrity forward-compatibility backward-compatibility mutable new zooko defect major 625 Can't repair read-only dirnodes/mutable-files confidentiality integrity preservation verify repair newcaps tahoe-backup usability anti-censorship excess-authority assigned warner defect major 654 make the storage index be the verifier cap newcaps verify integrity performance new enhancement major 686 Search for lost share resulted in a directory popping up at unexpected place integrity error assigned daira defect major 723 helper: client should verify ciphertext hashes and UEB upload-helper integrity new daira defect major 794 create DSA writecaps from a passphrase newcaps newurls usability confidentiality integrity new enhancement major 822 Web API should use a more reliable, out-of-band means of reporting errors (such as a server connection being lost) during a download integrity error http download new defect major 840 Allow all CLI commands to take arguments from stdin or a file, to avoid caps being visible to other local users security confidentiality integrity usability new enhancement major 847 create internal VerifierNode/RepairerNode classes confidentiality integrity verify repair new somebody task major 870 Prevent socket hijacking on OSes that don't prevent it by default (Windows) security integrity confidentiality privacy windows foolscap twisted docs assigned davidsarah defect major 922 The URL of the info page for an unknown dirnode should not grant authority to the containing directory capleak integrity confidentiality newurls assigned davidsarah defect major 954 revocable write authority integrity capleak forward-compatibility newcaps revocation research new enhancement major 955 use client-side storage to defend against rollback attack integrity newcaps rollback new enhancement major 957 embed security metadata in URL newcaps newurls integrity redirect rollback new somebody enhancement major 958 LAFS 301 Moved Permanently forward-compatibility backward-compatibility integrity newcaps newurls http sftp ftpd smb availability security revocation rollback research new enhancement major 992 Store Content-Type as part of directory entries metadata integrity new somebody enhancement major 994 support precompressed files compression space-efficiency performance bandwidth security integrity backward-compatibility new somebody enhancement major 1105 allow uncoordinated reads concurrent with writes of a mutable file or directory locally docs fuse sftp integrity reliability new defect major 1213 Should support change of hash functions security forward-compatibility integrity new somebody task major 1422 https node.url is not verified by httplib https security integrity confidentiality new nobody defect major 1696 attempting more than four simultaneous put uploads seems to break client integrity preservation reliability scalability error new somebody defect major 1415 WUI is more useful than CLI security privacy capleak integrity confidentiality new defect normal 1535 Allow restricting Tahoe-LAFS gateway to one user by supporting Unix sockets wui cli socket unix security confidentiality integrity capleak new enhancement normal 2369 Support encryptionless sftp using sftp-over-tcp performance security confidentiality integrity new HoverHell enhancement normal 427 what happens when a file changes as you're copying it? integrity locking upload new defect minor 907 Stop caps from leaking to phishing-filter servers capleak integrity confidentiality forward-compatibility newurls docs websec assigned davidsarah defect minor