[tor-bugs] #17369 [Tor Browser]: The RC4 cipher flags in TBB must be set to "false" by default

[Tor Bug Tracker & Wiki]

#17369: The RC4 cipher flags in TBB must be set to "false" by default
------------------------------------------------+--------------------------
 Reporter:  TORques                             |          Owner:  tbb-team
     Type:  defect                              |         Status:
 Priority:  Medium                              |  needs_review
Component:  Tor Browser                         |      Milestone:
 Severity:  Major                               |        Version:
 Keywords:  TorBrowserTeam201511, tbb-security  |     Resolution:
Parent ID:                                      |  Actual Points:
  Sponsor:                                      |         Points:
------------------------------------------------+--------------------------
Changes (by gk):

 * status:  reopened => needs_review


Comment:

 bug_17339 (https://gitweb.torproject.org/user/gk/tor-
 browser.git/commit/?h=bug_17369&id=a943aa626c8e1999e46b765e08e9683fafa590ce)
 has a fix for review. I am testing this for a while now with no issues.
 Shipping this in the alpha and backporting this to the stable coming after
 the next one (given we don't find any problems) should be fine: Firefox 44
 will be shipped then where the RC4 fallback is disabled by default, too.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/17369#comment:5>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online