Georg Koppen:
> Tom Ritter:
>> The info I gave you was for Tor Browser, the the latter (about session
>> ID) is actually wrong. TBB disables both.
>>
>> https://trac.torproject.org/projects/tor/ticket/20447#ticket
>> https://gitweb.torproject.org/tor-browser.git/tree/security/manager/ssl/nsNSSComp
Tom Ritter:
> The info I gave you was for Tor Browser, the the latter (about session
> ID) is actually wrong. TBB disables both.
>
> https://trac.torproject.org/projects/tor/ticket/20447#ticket
> https://gitweb.torproject.org/tor-browser.git/tree/security/manager/ssl/nsNSSComponent.cpp?h=tor-brows
The info I gave you was for Tor Browser, the the latter (about session
ID) is actually wrong. TBB disables both.
https://trac.torproject.org/projects/tor/ticket/20447#ticket
https://gitweb.torproject.org/tor-browser.git/tree/security/manager/ssl/nsNSSComponent.cpp?h=tor-browser-45.4.0esr-6.5-1#n72
Hey all,
Since tor devs have thought about how to handle TLS Session Tickets and
Identifiers, I want to capture that approach and stick it into our
NetCipher library, which is also used in Orfox. As I understand it, the
approach is:
* disable TLS Session Tickets entirely
* reset TLS Session Ide
