[tor-bugs] #32885 [Applications/Tor Browser]: Make sure SSL resumption cache in Necko adheres to FPI
Tor Bug Tracker & Wiki
blackhole at torproject.org
Mon Jan 6 20:20:31 UTC 2020
#32885: Make sure SSL resumption cache in Necko adheres to FPI
-------------------------------------+-------------------------------------
Reporter: gk | Owner: tbb-team
Type: task | Status: new
Priority: Medium | Milestone:
Component: Applications/Tor | Version:
Browser | Keywords: ff76-esr, tbb-
Severity: Normal | linkability
Actual Points: | Parent ID:
Points: | Reviewer:
Sponsor: |
-------------------------------------+-------------------------------------
There is a new SSL resumption cache that got developed
[https://bugzilla.mozilla.org/show_bug.cgi?id=1546975 in Necko] and put
behind `network.ssl_tokens_cache_enabled`. From a quick glance it is not
obvious whether it bypasses FPI or not, so we should investigate.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/32885>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list