[tbb-bugs] #11154 [Applications/Tor Browser]: Disable TLS 1.0 (and 1.1) by default (was: Tor TLS and Security Cipher)

Tor Bug Tracker & Wiki blackhole at torproject.org
Fri Jan 17 09:00:21 UTC 2020


#11154: Disable TLS 1.0 (and 1.1) by default
--------------------------------------+--------------------------
 Reporter:  ZeroCool                  |          Owner:  tbb-team
     Type:  defect                    |         Status:  new
 Priority:  Medium                    |      Milestone:
Component:  Applications/Tor Browser  |        Version:
 Severity:  Normal                    |     Resolution:
 Keywords:  ff78-esr-will-have        |  Actual Points:
Parent ID:                            |         Points:
 Reviewer:                            |        Sponsor:
--------------------------------------+--------------------------
Changes (by gk):

 * keywords:  needs-triage => ff78-esr-will-have


Comment:

 We have everything this bug complains about apart from the tls min
 version. However, a fix for that landed recently: https://hg.mozilla.org
 /mozilla-central/rev/1d07ac23cc5a, so it seems Mozilla is confident this
 sticks and is not impacting usability too much. We could probably think
 about backporting that fix into our alpha series. Dunno what the real
 browser devs think about that, though. :)

 Either way, this will be fixed in esr78.

--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/11154#comment:6>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online


More information about the tbb-bugs mailing list