commit 2d4e6e85f27b920acc0ca6f9b9f23aa836ae59d9 Author: Mike Perry mikeperry-git@fscked.org Date: Thu Dec 8 15:30:16 2011 -0800

Bug 4603: Lower keep-alive timeout to reduce linkability

20 seconds seems a decent compromise until we can properly isolate keep-alive connections.. --- src/chrome/content/torbutton.js | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-)

diff --git a/src/chrome/content/torbutton.js b/src/chrome/content/torbutton.js index a641299..beb43ab 100644 --- a/src/chrome/content/torbutton.js +++ b/src/chrome/content/torbutton.js @@ -1966,6 +1966,14 @@ function torbutton_update_status(mode, force_update) { !m_tb_prefs.getBoolPref("security.enable_ssl2")); }

+ // Lower keep-alive timeout to reduce cross-domain linkability + // https://trac.torproject.org/projects/tor/ticket/4603 + if (mode) { + m_tb_prefs.setIntPref("network.http.keep-alive.timeout", 20); + } else { + m_tb_prefs.clearUserPref("network.http.keep-alive.timeout"); + } + // This clears the OCSP cache. // // nsNSSComponent::Observe() watches security.OCSP.enabled, which calls