24 Oct
2016
24 Oct
'16
4:44 p.m.
The info I gave you was for Tor Browser, the the latter (about session ID) is actually wrong. TBB disables both.
https://trac.torproject.org/projects/tor/ticket/20447#ticket https://gitweb.torproject.org/tor-browser.git/tree/security/manager/ssl/nsNS...
Also: https://trac.torproject.org/projects/tor/ticket/4099
Core Tor also disables both also AFAICT: https://gitweb.torproject.org/tor.git/commit/?id=8743080a289a20bfaf0a67d6382... https://gitweb.torproject.org/tor.git/tree/src/common/tortls.c#n1164
-tom