[tbb-bugs] #27848 [Applications/Tor Browser]: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for 8.0.0

[Tor Bug Tracker & Wiki]

#27848: Cloudflare consistently displays captcha for TorBrowser 8.0.1 but not for
8.0.0
--------------------------------------+-----------------------------------
 Reporter:  cypherpunks_reply         |          Owner:  tbb-team
     Type:  defect                    |         Status:  needs_information
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:                            |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+-----------------------------------
Changes (by traumschule):

 * cc: mahrud (added)
 * status:  new => needs_information


Comment:

 Cloudflare is all for TLS 1.3, so why the captcha?
 ----
 A Detailed Look at RFC 8446 (a.k.a. TLS 1.3) 10 Aug 2018 by Nick Sullivan
 https://blog.cloudflare.com/rfc-8446-aka-tls-1-3/
 > TLS 1.3 is a modern security protocol built with modern tools like
 formal analysis that retains its backwards compatibility. It has been
 tested widely and iterated upon using real world deployment data. It’s a
 cleaner, faster, and more secure protocol ready to become the de facto
 two-party encryption protocol online. Draft 28 of TLS 1.3 is enabled by
 default for all Cloudflare customers, and we will be rolling out the final
 version soon.
 > Publishing TLS 1.3 is a huge accomplishment. It is one the best recent
 examples of how it is possible to take 20 years of deployed legacy code
 and change it on the fly, resulting in a better internet for everyone. TLS
 1.3 has been debated and analyzed for the last three years and it’s now
 ready for prime time. Welcome, RFC 8446.
 ----
 FIXED in Firefox 52: CloudFlare triggers unsafe negotiation warning with
 TLS 1.3
 https://bugzilla.mozilla.org/show_bug.cgi?id=1305561

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/27848#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online