[tbb-bugs] #28315 [Applications/Tor Browser]: "New Identity for this Site"

[Tor Bug Tracker & Wiki]

#28315: "New Identity for this Site"
--------------------------------------+--------------------------
 Reporter:  arthuredelstein           |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Description changed by arthuredelstein:

Old description:

> We have "New Circuit for this Site", but the cache and other supercookies
> for that first party are not wiped. Only the stream is changed.
>
> It should be possible to implement "New Identity for this Site", for
> example by incrementing the container ID. (Note however that containers
> are not as strict as first-party isolation, so it might be better to
> introduce a new counting mechanism into origin attributes that shares the
> same strict policy as FPI.) In that case, all supercookies would be wiped
> and a fresh circuit used.

New description:

 We have "New Circuit for this Site", but the cache and other supercookies
 for that first party are not wiped. Only the stream is changed.

 It should be possible to implement "New Identity for this Site", for
 example by incrementing the container ID. (Note however that containers
 are not as strict as first-party isolation, so it might be better to
 introduce a new counting mechanism into origin attributes that shares the
 same strict policy as FPI.) In that case, all supercookies would be wiped
 and a fresh circuit used.

 See also #28316.

--

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/28315#comment:4>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online