<html><head></head><body><div style="font-family: Verdana;font-size: 12.0px;"><div>Can you please fix the following typo in the ticket:</div>
<div> </div>
<div>
<div>"..use OCSP Stabling by default.."</div>
<div> </div>
<div>which you copied from me.</div>
<div> </div>
<div>Sorry, but I am kind of a perfectionist, my thoughts kind of don't have an off button.</div>
<div> </div>
<div>Regards,</div>
<div>Elise</div>
<div>
<div name="quote" style="margin:10px 5px 5px 10px; padding: 10px 0 10px 10px; border-left:2px solid #C3D9E5; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="margin:0 0 10px 0;"><b>Gesendet:</b> Dienstag, 23. August 2022 um 16:18 Uhr<br/>
<b>Von:</b> "Richard Pospesel" <pospeselr@riseup.net><br/>
<b>An:</b> tbb-dev@lists.torproject.org<br/>
<b>Betreff:</b> Re: [tbb-dev] Data Leak: Disable old, unencrypted OCSP verification in TBB.</div>
<div name="quoted-content">opened <a href="https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41115" target="_blank">https://gitlab.torproject.org/tpo/applications/tor-browser/-/issues/41115</a><br/>
<br/>
On 8/23/22 16:01, elise.toradin@web.de wrote:<br/>
> Hi, sadly I noticed that OCSP (security.OCSP.enabled) is still enabled in the latest TBB, I hope you<br/>
> are all aware that this data is sent unencrypted and can be used by CA's to track users.<br/>
> OCSP Stapling has been a common feature of web servers since 2017, so I suppose we should rely on<br/>
> that instead?<br/>
> Firefox is configured to use OCSP Stabling by default, but I still see an unencrypted OCSP<br/>
> connection for every https:// connection.<br/>
> security.ssl.enable_ocsp_stapling = true<br/>
> security.ssl.enable_ocsp_must_staple = true<br/>
><br/>
> security.OCSP.enabled = 0<br/>
> Best Regards,<br/>
> Elise<br/>
><br/>
> _______________________________________________<br/>
> tbb-dev mailing list<br/>
> tbb-dev@lists.torproject.org<br/>
> <a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev</a><br/>
_______________________________________________<br/>
tbb-dev mailing list<br/>
tbb-dev@lists.torproject.org<br/>
<a href="https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev" target="_blank">https://lists.torproject.org/cgi-bin/mailman/listinfo/tbb-dev</a></div>
</div>
</div>
</div></div></body></html>