[tor-bugs] #15426 [Core Tor/Tor]: Update ciphers.inc to match ciphers from current Firefox

[Tor Bug Tracker & Wiki]

#15426: Update ciphers.inc to match ciphers from current Firefox
-------------------------------------------------+-------------------------
 Reporter:  cypherpunks                          |          Owner:  nickm
     Type:  enhancement                          |         Status:
                                                 |  accepted
 Priority:  High                                 |      Milestone:  Tor:
                                                 |  0.3.0.x-final
Component:  Core Tor/Tor                         |        Version:
 Severity:  Normal                               |     Resolution:
 Keywords:  027-triaged-1-out, nickm-            |  Actual Points:
  deferred-20160905, tor-03-unspecified-201612   |
Parent ID:                                       |         Points:  2
 Reviewer:                                       |        Sponsor:
-------------------------------------------------+-------------------------

Comment (by cypherpunks):

 >  This is now being used in places in England to block access to Tor. Can
 confirm Gatwick Airport uses this.

 > Modifying the header using for example Fiddler on Windows makes Tor
 network accessible again.

 Airport using some DPI, that periodically (several days or weeks) get
 updates from vendor. You can't to make ciphersuites for Tor and Firefox to
 match for 100%, they using different libs, smart dpi vendor will use that
 difference for sure. So this ticket can't help you to bypass censorship in
 any real timeline.

 If you want to play censorship box vs. plain Tor, then you need to make
 ciphersuites configurable by user, and still to be ready to get specific
 openssl's fpr.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/15426#comment:20>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online